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1 AMD-K6™ MMX™ Enhanced Processor 



m Advanced 6-Issue RISC86® Superscalar Microarchitecture 

♦ Seven parallel specialized execution units 

♦ Multiple sophisticated x86-to-RISC86 instruction decoders 

♦ Advanced two-level branch prediction 

♦ Speculative execution 

♦ Out-of-order execution 

♦ Register renaming and data forwarding 

♦ Issues up to six RISC86 instructions per clock 

■ Large On-Chip Split 64-Kbyte Level-One (LI) Cache 

♦ 32-Kbyte instruction cache with additional predecode cache 

♦ 32-Kbyte writeback dual-ported data cache 

♦ MESI protocol support 

■ High-Performance IEEE 754-Compatible Floating-Point Unit 

■ High-Performance Industry-Standard MMX™ Instructions 

■ 321-Pin Ceramic Pin Grid Array (CPGA) Package (Socket 7 Compatible) 

■ Industry-Standard System Management Mode (SMM) 

■ IEEE 1149.1 Boundary Scan 

■ Full x86 Binary Software Compatibility 

As the next generation in the AMD K86™ family of x86 processors, the innovative 
AMD-K6™ MMX™ enhanced processor brings industry-leading performance to PC 
systems running the extensive installed base of x86 software. In addition, its socket 7 
compatible, 321-pin Ceramic Pin Grid Array (CPGA) package enables the AMD-K6 to 
reduce time-to-market by leveraging today’s cost-effective infrastructure to deliver a 
superior price/performance PC solution. 

To provide state-of-the-art performance, the AMD-K6 processor incorporates the 
innovative and efficient RISC86 microarchitecture, a large 64-Kbyte level-one cache 
(32-Kbyte dual-ported data cache, 32-Kbyte instruction cache with predecode data), a 
powerful IEEE 754-compatible floating-point execution unit, and a high-performance 
multimedia execution unit for executing industry-standard MMX instructions. These 
features have been combined to deliver industry leadership in 16-bit and 32-bit 
performance, providing exceptional performance for both Windows® 95 and Windows 
NT™ software bases. 
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The AMD-K6 MMX enhanced processor’s RISC86 microarchitecture is a decoupled 
decode/execution superscalar design that implements state-of-the-art design 
techniques to achieve leading-edge performance. Advanced design techniques 
implemented in the AMD-K6 include multiple x86 instruction decode, single-clock 
internal RISC operations, seven execution units that support superscalar operation, 
out-of-order execution, data forwarding, speculative execution, and register 
renaming. In addition, the processor supports the industry’s most advanced branch 
prediction logic by implementing an 8192-entry branch history table, the industry’s 
only branch target cache, and a return address stack, which combine to deliver 
better than a 95% prediction rate. These design techniques enable the AMD-K6 
processor to issue, execute, and retire multiple x86 instructions per clock, resulting 
in excellent scaleable performance. 

The AMD-K6 processor is fully x86 binary code compatible. AMD’s extensive 
experience through four generations of x86 processors has been carefully integrated 
into the AMD-K6 to provide complete compatibility with Windows 95, Windows 3.x, 
Windows NT, DOS, OS/2, Unix, Solaris, NetWare®, Vines, and other leading x86 
operating systems and applications. The AMD-K6 processor is Socket 7 compatible, 
allowing the processor to be quickly and easily integrated into a mature and 
cost-effective industry-standard infrastructure of motherboards, chipsets, power 
supplies, and thermal designs. 

AMD has designed, manufactured, and delivered over 50 million Microsoft 
Windows-compatible processors in the last five years alone. The AMD-K6 processor is 
the next generation in this long line of processors. With its combination of 
state-of-the-art features, industry-leading performance, high-performance 
multimedia engine, full x86 compatibility, and low-cost infrastructure, the AMD-K6 
is the superior choice for mainstream personal computers. 
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2 Internal Architecture 



2.1 Introduction 

The AMD-K6 MMX enhanced processor implements advanced 
design techniques known as the RISC86 microarchitecture. The 
RISC86 microarchitecture is a decoupled decode/execution 
design approach that yields superior sixth-generation 
performance for x86-based software. This chapter describes the 
techniques used and the functional elements of the RISC86 
microarchitecture . 

2.2 AMD-K6™ Processor Microarchitecture Overview 

When discussing processor design, it is important to 
understand the terms architecture, microarchitecture, and design 
implementation. The term architecture refers to the instruction 
set and features of a processor that are visible to software 
programs running on the processor. The architecture 
determines what software the processor can run. The 
architecture of the AMD-K6 MMX enhanced processor is the 
industry-standard x86 instruction set. 

The term microarchitecture refers to the design techniques used 
in the processor to reach the target cost, performance, and 
functionality goals. The AMD-K6 is based on a sophisticated 
RISC core known as the Enhanced RISC86 microarchitecture. 
The Enhanced RISC86 microarchitecture is an advanced, 
second-order decoupled decode/execution design approach 
that enables industry-leading performance for x86-based 
software. 

The term design implementation refers to the actual logic and 
circuit designs from which the processor is created according to 
the microarchitecture specifications. 
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Enhanced RISC86® 
Microarchitecture 



The Enhanced RISC86 microarchitecture defines the 
characteristics of the AMD-K6. The innovative RISC86 
microarchitecture approach implements the x86 instruction set 
by internally translating x86 instructions into RISC86 
operations. These RISC86 operations were specially designed 
to include direct support for the x86 instruction set while 
observing the RISC performance principles of fixed length 
encoding, regularized instruction fields, and a large register 
set. The Enhanced RISC86 microarchitecture used in the 
AMD-K6 enables higher processor core performance and 
promotes straightforward extensibility in future designs. 
Instead of directly executing complex x86 instructions, which 
have lengths of 1 to 15 bytes, the AMD-K6 processor executes 
the simpler and easier fixed-length RISC86 opcodes, while 
maintaining the instruction coding efficiencies found in x86 
programs. 

The AMD-K6 MMX enhanced processor contains parallel 
decoders, a centralized RISC86 operation scheduler, and seven 
execution units that support superscalar operation — multiple 
decode, execution, and retirement — of x86 instructions. These 
elements are packed into an aggressive and highly efficient 
six-stage pipeline. 

Decoders. Decoding of the x86 instructions begins when the 
on-chip instruction cache is filled. Predecode logic determines 
the length of an x86 instruction on a byte-by-byte basis. This 
predecode information is stored, along with the x86 
instructions, in the instruction cache, to be used later by the 
decoders. The decoders translate on-the-fly, with no additional 
latency, up to two x86 instructions per clock into RISC86 
operations. 

Note : In this chapter, “clock” refers to a processor clock. 

The AMD-K6 processor categorizes x86 instructions into three 
types of decodes — short, long and vector. The decoders process 
either two short, one long, or one vector decode at a time. The 
three types of decodes have the following characteristics: 

■ Short decodes — x86 instructions less than or equal to seven 
bytes in length 

■ Long decodes — x86 instructions less than or equal to 11 
bytes in length 

■ Vector decodes — complex x86 instructions 
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Short and long decodes are processed completely within the 
decoders. Vector decodes are started by the decoders and then 
completed by fetched sequences from an on-chip ROM. After 
decoding, the RISC86 operations are delivered to the scheduler 
for dispatching to the executions units. 

Scheduler/lnstruction Control Unit. The centralized scheduler or 
buffer is managed by the Instruction Control Unit (ICU). The 
ICU buffers and manages up to 24 RISC86 operations at a time. 
This equals from 6 to 12 x86 instructions. This buffer size (24) is 
perfectly matched to the processor’s six-stage RISC86 pipeline 
and seven parallel execution units. The scheduler accepts as 
many as four RISC86 operations at a time from the decoders. 
The ICU is capable of simultaneously issuing up to six RISC86 
operations at a time to the execution units. This consists of the 
following types of operations: 

a Memory load operation 
□ Memory store operation 
a Complex integer or MMX register operation 
a Simple integer register operation 
a Floating-point register operation 
a Branch condition evaluation 

Registers. The scheduler uses 48 physical registers that are 
contained within the RISC86 microarchitecture when 
managing the 24 RISC86 operations. The 48 physical registers 
are located in a general register file and are grouped as 24 
general registers, plus 24 renaming registers. The 24 general 
registers consist of 16 scratch registers and eight registers that 
correspond to the x86 general purpose registers — EAX, EBX, 
ECX, EDX, EBP, ESP, ESI and EDI. 

Branch Logic. The AMD-K6 MMX enhanced processor is designed 
with highly sophisticated dynamic branch logic consisting of 
the following: 

■ Branch history/Prediction table 

■ Branch target cache 
d Return address stack 

The AMD-K6 implements a two-level branch prediction scheme 
based on an 8192-entry branch history table. The branch 
history table stores prediction information that is used for 
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predicting conditional branches. Because the branch history 
table does not store predicted target addresses, special address 
ALUs calculate target addresses on-the-fly during instruction 
decode. The branch target cache augments predicted branch 
performance by avoiding a one clock cache-fetch penalty. This 
specialized target cache does this by supplying the first 16 
bytes of target instructions to the decoders when branches are 
predicted. The return address stack is a unique device 
specifically designed for optimizing CALL and RETURN pairs. 
In summary, the AMD-K6 uses dynamic branch logic to 
minimize delays due to the branch instructions that are 
common in x86 software. 

AMD-K6™ Processor Block Diagram. As shown in Figure 1, the 
high-performance, out-of-order execution engine of the 
AMD-K6 MMX enhanced processor is mated to a split level-one 
64-Kbyte writeback cache with 32 Kbytes of instruction cache 
and 32 Kbytes of data cache. The instruction cache feeds the 
decoders and, in turn, the decoders feed the scheduler. The 
ICU issues and retires RISC86 operations contained in the 
scheduler. The system bus interface is an industry-standard 
64-bit Pentium® processor demultiplexed bus. 

The AMD-K6 processor combines the latest in processor 
microarchitecture to provide the highest x86 performance for 
today’s personal computers. The AMD-K6 offers true 
sixth-generation performance and full x86 binary software 
compatibility. 
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Figure l. AMD-K6™ MMX™ Enhanced Processor Block Diagram 



2.3 Cache, Instruction Prefetch, and Predecode Bits 

The writeback level-one cache on the AMD-K6 processor is 
organized as a separate 32-Kbyte instruction cache and a 
32-Kbyte data cache with two-way set associativity. The cache 
line size is 32 bytes and lines are prefetched from main memory 
using an efficient pipelined burst transaction. As the 
instruction cache is filled, each instruction byte is analyzed for 
instruction boundaries using predecoding logic. Predecoding 
annotates each instruction byte with information that later 
enables the decoders to efficiently decode multiple 
instructions simultaneously. 

Cache The processor cache design takes advantage of a sectored 

organization (see Figure 2). Each sector consists of 64 bytes 
configured as two 32-byte cache lines. The two cache lines of a 
sector share a common tag but have separate pairs of MESI 
(Modified, Exclusive, Shared, Invalid) bits that track the state 
of each cache line. 
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Tag 

Address 


Cache Line 1 


Byte 31 


Predecode Bits 


Byte 30 


Predecode Bits 






Byte 0 


Predecode Bits 


MES1 Bits 


Cache Line 2 


Byte 31 


Predecode Bits 


Byte 30 


Predecode Bits 






Byte 0 


Predecode Bits 


MESI Bits 



Figure 2. Cache Sector Organization 

Two forms of cache misses and associated cache fills can take 
place — a sector replacement and a cache line replacement. In 
the case of a sector replacement, the miss is due to a tag 
mismatch, in which case the required cache line is filled from 
external memory, and the cache line within the sector that was 
not required is marked as invalid. In the case of a cache line 
replacement, the address matches the tag, but the requested 
cache line is marked as invalid. The required cache line is filled 
from external memory, and the cache line within the sector that 
is not required remains in the same cache state. 

Prefetching The AMD-K6 MMX enhanced processor performs cache 

prefetching for sector replacements only — as opposed to cache 
line replacements. This cache prefetching results in the filling 
of the required cache line first, and a prefetch of the second 
cache line. Furthermore, the prefetch of the cache line that is 
not required is initiated only in the forward direction — that is, 
only if the requested cache line is the first cache line within the 
sector. From the perspective of the external bus, the two 
cache-line fills typically appear as two 32-byte burst read cycles 
occurring back-to-back or, if allowed, as pipelined cycles. 

Predecode Bits Decoding x86 instructions is particularly difficult because the 

instructions are variable-length and can be from 1 to 15 bytes 
long. Predecode logic supplies the predecode bits that are 
associated with each instruction byte. The predecode bits 
indicate the number of bytes to the start of the next x86 
instruction. The predecode bits are stored in an extended 
instruction cache alongside each x86 instruction byte as shown 
in Figure 2. The predecode bits are passed with the instruction 
bytes to the decoders where they assist with parallel x86 
instruction decoding. 
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2.4 Instruction Fetch and Decode 

Instruction Fetch The processor can fetch up to 16 bytes per clock out of the 

instruction cache or branch target cache. The fetched 
information is placed into a 16-byte instruction buffer that 
feeds directly into the decoders (see Figure 3). Fetching can 
occur along a single execution stream with up to seven 
outstanding branches taken. 

The instruction fetch logic is capable of retrieving any 16 
contiguous bytes of information within a 32-byte boundary. 
There is no additional penalty when the 16 bytes of instructions 
lie across a cache line boundary. The instruction bytes are 
loaded into the instruction buffer as they are consumed by the 
decoders. Although instructions can be consumed with byte 
granularity, the instruction buffer is managed on a 
memory-aligned word (2 bytes) organization. Therefore, 
instructions are loaded and replaced with word granularity. 
When a control transfer occurs — such as a JMP instruction — 
the entire instruction buffer is flushed and reloaded with a new 
set of 16 instruction bytes. 




Figure 3. The Instruction Buffer 
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Instruction Decode The AMD-K6 MMX enhanced processor decode logic is 
designed to decode multiple x86 instructions per clock (see 
Figure 4). The decode logic accepts x86 instruction bytes and 
their predecode bits from the instruction buffer, locates the 
actual instruction boundaries, and generates RISC86 
operations from these x86 instructions. 

RISC86 operations are fixed-format internal instructions. Most 
RISC86 operations execute in a single clock. RISC86 operations 
are combined to perform every function of the x86 instruction 
set. Some x86 instructions are decoded into as few as zero 
RISC86 opcodes — for instance a NOP — or one RISC86 
operation — a register-to-register add. More complex x86 
instructions are decoded into several RISC86 operations. 
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The AMD-K6 MMX enhanced processor uses a combination of 
decoders to convert x86 instructions into RISC86 operations. 
The hardware consists of three sets of decoders — two parallel 
short decoders, one long decoder, and one vectoring decoder. 
The parallel short decoders translate the most commonly-used 
x86 instructions (moves, shifts, branches, ALU, MMX, FPU) 
into zero, one, or two RISC86 operations each. The short 
decoders only operate on x86 instructions that are up to seven 
bytes long. In addition, they are designed to decode up to two 
x86 instructions per clock. The commonly-used x86 instructions 
that are greater than seven bytes but not more than 11 bytes 
long, and semi-commonly-used x86 instructions that are up to 
seven bytes long are handled by the long decoder. 

The long decoder only performs one decode per clock and 
generates up to four RISC86 operations. All other translations 
(complex instructions, serializing conditions, interrupts and 
exceptions, etc.) are handled by a combination of the vector 
decoder and RISC86 operation sequences fetched from an 
on-chip ROM. For complex operations, the vector decoder logic 
provides the first set of RISC86 operations and a vector (initial 
ROM address) to a sequence of further RISC86 operations. The 
same types of RISC86 operations are fetched from the ROM as 
those that are generated by the hardware decoders. 

Note: Although all three sets of decoders are simultaneously fed a 
copy of the instruction buffer contents, only one of the three 
types of decoders is used during any one decode clock. 

The decoders or the RISC86 sequencer always generate a group 
of four RISC86 operations. For decodes that cannot fill the 
entire group with four RISC86 operations, RISC86 NOP 
operations are placed in the empty locations of the grouping. For 
example, a long-decoded x86 instruction that converts to only 
three RISC86 operations is padded with a single RISC86 NOP 
operation and then passed to the scheduler. Up to six groups or 
24 RISC86 operations can be placed in the scheduler at a time. 

All of the common, and a few of the uncommon, floating-point 
instructions (also known as ESC instructions) are hardware 
decoded as short decodes. This decode generates a RISC86 
floating-point operation and, optionally, an associated 
floating-point load or store operation. Floating-point or ESC 
instruction decode is only allowed in the first short decoder, 
but non-ESC instructions, excluding MMX instructions, can be 
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decoded simultaneously by the second short decoder along with 
an ESC instruction decode in the first short decoder. 

All of the MMX instructions, with the exception of the EMMS 
instruction, are hardware decoded as short decodes. The MMX 
instruction decode generates a RISC86 MMX operation and, 
optionally, an associated MMX load or store operation. MMX 
instruction decode is only allowed in the first short decoder. 
However, instructions other than MMX and ESC instructions 
can be decoded simultaneously by the second short decoder 
along with an MMX instruction decode in the first short 
decoder. 

2.5 Centralized Scheduler 

The scheduler is the heart of the AMD-K6 MMX enhanced 
processor (see Figure 5). It contains the logic necessary to 
manage out-of-order execution, data forwarding, register 
renaming, simultaneous issue and retirement of multiple 
RISC86 operations, and speculative execution. The scheduler’s 
buffer can hold up to 24 RISC86 operations. This equates to a 
maximum of 12 x86 instructions. When possible, the scheduler 
can simultaneously issue a RISC86 operation to any available 
execution unit (store, load, branch, integer, integer/multimedia, 
or floating-point). In total, the scheduler can issue up to six and 
retire up to four RISC86 operations per clock. 

The main advantage of the scheduler and its operation buffer is 
the ability to examine an x86 instruction window equal to 12 
x86 instructions at one time. This advantage is due to the fact 
that the scheduler operates on the RISC86 operations in 
parallel and allows the AMD-K6 processor to perform dynamic 
on-the-fly instruction code scheduling for optimized execution. 
Although the scheduler can issue RISC86 operations for 
out-of-order execution, it always retires x86 instructions in 
order. 
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From Decode Logic 




RISC86 Operation Buffer 



Figure 5. AMD-K6™ Processor Scheduler 

2.6 Execution Units 

The AMD-K6 MMX enhanced processor contains seven 
execution units — store, load, integer X, integer Y, multimedia, 
floating-point, and branch condition. Each unit is independent 
and capable of handling the RISC86 operations. Table 1 details 
the execution units, functions performed within these units, 
operation latency, and operation throughput. 

The store and load execution units are two-staged pipelined 
designs. The store unit performs data writes and register 
calculation for LEA/PUSH. Data memory and register writes 
from stores are available after one clock. The load unit 
performs data memory reads. Data is available from the load 
unit after two clocks. 

The Integer X execution unit can operate on all ALU 
operations, multiplies, divides (signed and unsigned), shifts, 
and rotates. 



Internal Architecture 



2-11 








AM D Z\ Preliminary Information 

AMD-K6™ MMX ™ Enhanced Processor Data Sheet 



20695E/0— June 1997 



The multimedia unit shares pipeline control with the Integer X 
unit and executes all MMX instructions. 

The Integer Y execution unit can operate on the basic word and 
doubleword ALU operations — ADD, AND, CMP, OR, SUB, 
XOR, zero-extend and sign-extend operands. 

The branch condition unit is separate from the branch 
prediction logic in that it resolves conditional branches such as 
JCC and LOOP after the branch condition has been evaluated. 



Table 1 . Execution Latency and Throughput of Execution Units 



Execution Unit 


Function 


Latency 


Throughput 


Store 


LEA/PUSH, Address 


1 


1 


Memory Store 


1 


1 


Load 


Memory Loads 


2 


1 


Integer X 


Integer ALU 


1 


1 


Integer Multiply 


2-3 


2-3 


Integer Shift 


1 


1 


Multimedia 


MMX ALU 


1 


1 


MMX Shifts, Packs, Unpack 


1 


1 


MMX Multiply 


1-2 


1-2 


Integer Y 


Basic ALU (1 6- & 32-bit operands) 


1 


1 


Branch 


Resolves Branch Conditions 


1 


1 


FPU 


FADD, FSUB, FMUL 


2 


2 



2 



2 
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2.7 Branch-Prediction Logic 

Sophisticated branch logic that can minimize or hide the impact 
of changes in program flow is designed into the AMD-K6 MMX 
enhanced processor. Branches in x86 code fit into two 
categories — unconditional branches, which always change 
program flow (that is, the branches are always taken) and 
conditional branches, which may or may not divert program flow 
(that is, the branches are taken or not-taken). When a 
conditional branch is not taken, the processor simply continues 
decoding and executing the next instructions in memory. 

Typical applications have up to 10% of unconditional branches 
and another 10% to 20% conditional branches. The AMD-K6 
branch logic has been designed to handle this type of program 
behavior and its negative effects on instruction execution, such 
as stalls due to delayed instruction fetching and the draining of 
the processor pipeline. The branch logic contains an 8192-entry 
branch history table, a 16-entry by 16-byte branch target cache, 
a 16-entry return address stack, and a branch execution unit. 

Branch History Table The AMD-K6 processor handles unconditional branches 
without any penalty by redirecting instruction fetching to the 
target address of the unconditional branch. However, 
conditional branches require the use of the dynamic 
branch-prediction mechanism built into the AMD-K6. A 
two-level adaptive history algorithm is implemented in an 
8192-entry branch history table. This table stores executed 
branch information, predicts individual branches, and predicts 
the behavior of groups of branches. To accommodate the large 
branch history table, the AMD-K6 processor does not store 
predicted target addresses. Instead, the branch target 
addresses are calculated on-the-fly using ALUs during the 
decode stage. The adders calculate all possible target addresses 
before the instructions are fully decoded and the processor 
chooses which addresses are valid. 

Branch Target Cache To avoid a one clock cache-fetch penalty when a branch is 
predicted taken, a built-in branch target cache supplies the 
first 16 bytes of instructions directly to the instruction buffer 
(assuming the target address hits this cache). (See Figure 3.) 
The branch target cache is organized as 16 entries of 16 bytes. 
In total, the branch prediction logic achieves branch prediction 
rates greater than 95%. 
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Return Address Stack 



Branch Execution 
Unit 



The return address stack is a special device designed to 
optimize CALL and RET pairs. Software is typically compiled 
with subroutines that are frequently called from various places 
in a program. This is usually done to save space. Entry into the 
subroutine occurs with the execution of a CALL instruction. At 
that time, the processor pushes the address of the next 
instruction in memory following the CALL instruction onto the 
stack (allocated space in memory). When the processor 
encounters a RET instruction (within or at the end of the 
subroutine), the branch logic pops the address from the stack 
and begins fetching from that location. To avoid the latency of 
main memory accesses during CALL and RET operations, the 
return address stack caches the pushed addresses. 

The branch execution unit enables efficient speculative 
execution. This unit gives the processor the ability to execute 
instructions beyond conditional branches before knowing 
whether the branch prediction was correct. The AMD-K6 MMX 
enhanced processor does not permanently update the x86 
registers or memory locations until all speculatively executed 
conditional branch instructions are resolved. When a 
prediction is incorrect, the processor backs out to the point of 
the mispredicted branch instruction and restores all registers. 
The AMD-K6 can support up to seven outstanding branches. 
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3 Software Environment 



This chapter provides a general overview of the AMD-K6 MMX 
enhanced processor’s x86 software environment and briefly 
describes the data types, registers, operating modes, 
interrupts, and instructions supported by the AMD-K6 
architecture and design implementation. 

3.1 Registers 

The AMD-K6 processor contains all the registers defined by the 
x86 architecture, including general-purpose, segment, 
floating-point, MMX, EFLAGS, control, task, debug, test, and 
descriptor/memory-management registers. In addition, this 
chapter provides information on the AMD-K6 Model-Specific 
Registers (MSRs). 

Note: Areas of the register designated as Reserved should not be 
modified by software. 

The eight 32-bit x86 general-purpose registers are used to hold 
integer data or memory pointers used by instructions. Table 2 
contains a list of the general-purpose registers and the 
functions for which they are used. 



Table 2. General-Purpose Registers 



Register 


Function 


EAX 


Commonly used as an accumulator 


EBX 


Commonly used as a pointer 


ECX 


Commonly used for counting in loop operations 


EDX 


Commonly used to hold I/O information and to pass parameters 


EDI 


Commonly used as a destination pointer by the ES segment 


ESI 


Commonly used as a source pointer by the DS segment 


ESP 


Used to point to the stack segment 


EBP 


Used to point to data within the stack segment 



In order to support byte and word operations, EAX, EBX, ECX, 
and EDX can also be used as 8-bit and 16-bit registers. The 
shorter registers are overlaid on the longer ones. For example, 
the name of the 16-bit version of EAX is AX (low 16 bits of 
EAX) and the 8-bit names for AX are AH (high order bits) and 
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AL (low order bits). The same naming convention applies to 
EBX, ECX, and EDX. EDI, ESI, ESP, and EBP can be used as 
smaller 16-bit registers called DI, SI, SP, and BP respectively, 
but these registers do not have 8-bit versions. Figure 6 shows 
the EAX register with its name components, and Table 3 lists 
the dword (32 bits) general-purpose registers and their 
corresponding word (16 bits) and byte (8 bits) versions. 



31 16 15 87 0 









◄ b 


\x 


► 



AX 



AH ► AL ► 

Figure 6. EAX Register with 16-Bit and 8-Bit Name Components 



Table 3. General-Purpose Register Dword, Word, and Byte Names 



32-Bit Name 
(Dword) 


16-Bit Name 
(Word) 


8-Bit Name 
(High-order Bits) 


8-Bit Name 
(Low-order Bits) 


EAX 


AX 


AH 


AL 


EBX 


BX 


BH 


BL 


ECX 


CX 


CH 


CL 


EDX 


DX 


DH 


DL 


EDI 


DI 


- 


- 


ESI 


SI 


- 


- 


ESP 


SP 


- 


- 


EBP 


BP 


- 


- 
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Integer Data Types Four types of data are used in general-purpose registers — byte, 

word, doubleword, and quadword integers. Figure 7 shows the 
format of the integer data registers. 






Figure 7. Integer Data Registers 
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Segment Registers The six 16-bit segment registers are used as pointers to areas 
(segments) of memory. Table 4 lists the segment registers and 
their functions. Figure 8 shows the format for all six segment 
registers. 



Table 4. Segment Registers 



Segment 

Register 


Segment Register Function 


CS 


Code segment, where instructions are located 


DS 


Data segment, where data is located 


ES 


Data segment, where data is located 


FS 


Data segment, where data is located 


GS 


Data segment, where data is located 


SS 


Stack segment 


15 


0 



Figure 8. Segment Register 

Segment Usage The operating system determines the type of memory model 

that is implemented. The segment register usage is determined 
by the operating system’s memory model. In a Real mode 
memory model the segment register points to the base address 
in memory. In a Protected mode memory model the segment 
register is called a selector and it selects a segment descriptor 
in a descriptor table. This descriptor contains a pointer to the 
base of the segment, the limit of the segment, and various 
protection attributes. For more information on descriptor 
formats, see “Descriptors and Gates” on page 3-25. Figure 9 
shows segment usage for Real mode and Protected mode 
memory models. 
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Protected Mode Memory Model 



Figure 9. Segment Usage 

Instruction Pointer The instruction pointer (EIP or IP) is used in conjunction with 
the code segment register (CS). The instruction pointer is 
either a 32-bit register (EIP) or a 16-bit register (IP) that keeps 
track of where the next instruction resides within memory. This 
register cannot be directly manipulated, but can be altered by 
modifying return pointers when a JMP or CALL instruction is 
used. 

Floating-Point The floating-point execution unit in the AMD-K6 MMX 

Registers enhanced processor is designed to perform mathematical 

operations on non-integer numbers. This floating-point unit 
conforms to the IEEE 754 and 854 standards and uses several 
registers to meet these standards — eight numeric 
floating-point registers, a status word register, a control word 
register, and a tag word register. 
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The eight floating-point registers are 80 bits wide and labeled 
FPR0-FPR7. Figure 10 shows the format of these floating-point 
registers. See “Floating-Point Register Data Types” on page 3-8 
for information on allowable floating-point data types. 



79 78 



64 63 



0 



Sign 



Exponent 



Significant^ 



Figure 10. Floating-Point Register 



The 16-bit FPU status word register contains information about 
the state of the floating-point unit. Figure 11 shows the format 
of this register. 



15 


14 


13 12 11 


10 


9 


8 


7 


6 


5 


4 


3 


2 


1 


0 


B 


C 


TOSP 


C 


C 


C 


E 


S 


P 


U 


0 


Z 


D 


1 




3 


2 


1 


0 


S 


F 


E 


E 


E 


E 


E 


J 



Symbol 


Description 


Bits 


B 


FPU Busy 


15 


G 


Condition Code 


14 


TOSP 


Top of Stack Pointer 


13-11 


C2 


Condition Code 


10 


Cl 


Condition Code 


9 


CO 


Condition Code 


8 


ES 


Error Summary Status 


7 


SF 


Stack Fault 


6 




Exception Flaes 




PE 


Precision Error 


5 


UE 


Underflow Error 


4 


OE 


Overflow Error 


3 


ZE 


Zero Divide Error 


2 


DE 


Denormalized Operation Error 


1 


IE 


Invalid Operation Error 


0 



TOSP Information 
000 = FPR0 
111= FPR7 



Figure 1 1 . FPU Status Word Register 
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The FPU control word register allows a programmer to manage 
the FPU processing options. Figure 12 shows the format of this 
register. 



15 14 13 


12 


11 10 


9 8 


7 6 


5 


4 


3 


2 


1 


0 




Y 


R 


P 




P 


U 


O 


Z 


D 


71 






C 


C 




M 


M 


M 


M 


M 


n 





Reserved 




Symbol 


Description 


Bits 


Y 


Infinity Bit (80287 compatibility) 12 - 


RC 


Rounding Control 


1 1-10- 


PC 


Precision Control 


9-8 • 




Exception Masks 




PM 


Precision 


5 ■ 


UM 


Underflow 


4 - 


OM 


Overflow 


3 ■ 


ZM 


Zero Divide 


2 ■ 


DM 


Denormalized Operation 


1 


IM 


Invalid Operation 


o ■ 



Rounding Control Information 
00b = Round to the nearest or even number 
0!b = Round down toward negative infinity 
10b = Round up toward positive infinity 
1 1 b = Truncate toward zero 



Precision Control Information 
00b = 24 bits Single Precision Real 
01 b = Reserved 

1 0b = 53 bits Double Precision Real 
1 1 b = 64 bits Extended Precision Real 



Figure 12. FPU Control Word Register 

The FPU tag word register contains information about the 
registers in the register stack. Figure 13 shows the format of 
this register. 



15 14 


13 12 


11 10 


9 8 


7 6 


5 4 


3 2 


1 0 


TAG 

(FPR7) 


TAG 

(FPR6) 


TAG 

(FPR5) 


TAG 

(FPR4) 


TAG 

(FPR3) 


TAG 

(FPR2) 


TAG 

(FPR1) 


TAG 

(FPR0) 



Tag Values 

00 = Valid 

01 = Zero 

10 = Special 

1 1 = Empty 



Figure 13. FPU Tag Word Register 
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Floating-Point Floating-point registers use four different types of data — 

Register Data Types packed decimal, single precision real, double precision real, 
and extended precision real. Figures 14 and 15 show the 
formats for these registers. 



79 78 72 71 0 



s 


Ignore 

or 

Zero 


Precision - 1 8 Digits, 72 Bits Used, 4-Bits/Digit 




1 



Description Bits 



1 Ignored on Load, Zeros on Store 78-72 

Sign Bit 79 

Figure 14. Packed Decimal Data Register 



Single Precision Real 



Double Precision Real 



63 62 



52 51 



Biased 

Exponent 



S= Sign Bit 



31 30 23 22 



Biased 

Exponent 



Significand 



S=Sign Bit 



0 



Significand 



Extended Precision Real 

79 78 64 63 62 0 



S 


Biased 

Exponent 


1 


Significand 


1 


S- Sign Bit 


1 - Integer Bit 



Figure 15. Precision Real Data Registers 
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MMX™ Registers The AMD-K6 processor implements eight 64-bit MMX registers 

for use by multimedia software. These registers are mapped on 
the floating-point registers. The MMX instructions refer to 
these registers as mmregO to mmreg7. Figure 16 shows the 
format of these registers. See AMD-K6 ™ MMX™ Enhanced 
Processor Multimedia Technology, order# 20726 for more 
information. 



63 0 




Figure 16. MMX™ Registers 



Software Environment 



3-9 







AM D in Preliminary Information 

AMD-K6™ MMX™ Enhanced Processor Data Sheet 



20695E/0— June 1997 



EFLAGS Register The EFLAGS register provides for three different types of 

flags — system, control, and status. The system flags provide 
operating system controls, the control flag provides directional 
information for string operations, and the status flags provide 
information resulting from logical and arithmetic operations. 
Figure 17 shows the format of this register. 



31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 





1 

D 


V 

1 

P 


V 

1 

F 


A 

C 


V 

M 


l 




N 

T 


1 

0 

P 

L 


1 


D 

F 


i 

F 


7m 1 


1 


1-™“- 




A 

F 




p 

F 




3 




^1 


l" 


^1 














— 






— 


— 


— 




m m 




mm 


mm 





i_ 


— ► Reserved 




Symbol 


Description 


Bite 


ID 


ID Flag 


21 


VIP 


Virtual Interrupt Pending 


20 


VI F 


Virtual Interrupt Flag 


19 


AC 


Alignment Check 


18 


VM 


Virtual-8086 Mode 


17 


RF 


Resume Flag 


16 


NT 


Nested Task 


14 


I0PL 


I/O Privilege Level 


13-12 


OF 


Overflow Flag 


11 


DF 


Direction Flag 


10 


IF 


Interrupt Flag 


9 


TF 


Trap Flag 


8 


SF 


Sign Flag 


7 


ZF 


Zero Flag 


6 


AF 


Auxiliary Flag 


4 


PF 


Parity Flag 


2 


CF 


Carry Flag 


0 



Figure 17. EFLAGS Registers 
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Control Registers The five control registers contain system control bits and 

pointers. Figures 18 through 22 show the formats of these 
registers. 



31 7 6 5 4 3 2 10 




— ► Reserved 



Symbol 


Description 


Bit 


MCE 


Machine Check Enable 


6 


PSE 


Page Size Extensions 


4 


DE 


Debugging Extensions 


3 


TSD 


Time Stamp Disable 


2 


PVI 


Protected Virtual Interrupts 


1 


VME 


Virtual-8086 Mode Extensions 


0 



Figure 18. Control Register 4 (CR4) 



31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 



Page Directory Base 




n 


n 


| WS/M 




H 




m 






1 


H 


■ 



I | — ► Reserved 

Symbol Description Bjt 

PCD Page Cache Disable 4 

PWT Page Write Through 3 



Figure 19. Control Register 3 (CR3) 




Figure 20. Control Register 2 (CR2) 
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Debug Registers Figures 23 through 26 show the 32-bit debug registers 

supported by the processor. 



Symbol Description Bits 

■ LEN 3 Length of Breakpoint #3 31-30 

R/W3 Type of Transaction(s) to Trap 29-28 

LEN2 Length of Breakpoint #2 27-26 

fyW2 Type of Transaction(s) to Trap 25-24 

■ LEN 1 Length of Breakpoint #1 23-22 

■ R/W 1 Type of Transaction(s) to Trap 21-20 

■ LEN 0 Length of Breakpoint #0 19-18 

R/W0 Type of Transaction^) to Trap 17-16 



31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 



7 6 5 4 3 2 1 0 



LEN 

3 



R/W 

3 



LEN 

2 



IVW 

2 



LEN 



R/W 



LEN 

0 



R/W 

0 



Svmbol 


Description 


Bit 


GD 


General Detect Enabled 


13 


GE 


Global Exact Breakpoint Enabled 


9 


LE 


Local Exact Breakpoint Enabled 


8 


G3 


Global Exact Breakpoint # 3 Enabled 


7 


L3 


Local Exact Breakpoint # 3 Enabled 


6 


G2 


Global Exact Breakpoint # 2 Enabled 


5 


L2 


Local Exact Breakpoint # 2 Enabled 


4 


G1 


Global Exact Breakpoint # 1 Enabled 


3 


LI 


Local Exact Breakpoint # 1 Enabled 


2 


GO 


Global Exact Breakpoint # 0 Enabled 


1 


L0 


Local Exact Breakpoint # 0 Enabled 


0 



Figure 23. Debug Register DR7 
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31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 




| | — ► Reserved 



Svmbol 


Description 


Bit 


BT 


Breakpoint Task Switch 


15 


BS 


Breakpoint Single Step 


14 


BD 


Breakpoint Debug Access Detected 


13 


B3 


Breakpoint #3 Condition Detected 


3 


B2 


Breakpoint #2 Condition Detected 


2 


B1 


Breakpoint #1 Condition Detected 


1 


BO 


Breakpoint #0 Condition Detected 


0 



Figure 24. Debug Register DR6 
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DR3 



31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 



Breakpoint 3 32-bit Linear Address 



DR2 

31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 



Breakpoint 2 32-bit Linear Address 



DRl 



31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 



Breakpoint 1 32-bit Linear Address 



DRO 

31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 



Breakpoint 0 32-bit Linear Address 



Figure 26. Debug Registers DR3, DR2, DRl, and DRO 
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Model-Specific The AMD-K6 MMX enhanced processor provides seven MSRs. 

Registers (MSR) The value in the ECX register selects the MSR to be addressed 

by the RDMSR and WRMSR instructions. The values in EAX 
and EDX are used as inputs and outputs by the RDMSR and 
WRMSR instructions. Table 5 lists the MSRs and the 
corresponding value of the ECX register. Figures 27 through 33 
show the MSR formats. 



Table 5. Model-Specific Registers (MSRs) 



Model-Specific Register 


Value of ECX 


Machine Check Address Register (MCAR) 


OOh 


Machine Check Type Register (MCTR) 


Olh 


Test Register 12 (TR12) 


OEh 


Time Stamp Counter (TSC) 


lOh 


Extended Feature Enable Register (EFER) 


C000_0080h 


SYSCALL Target Address Register (STAR) 


C000_008lh 


Write Handling Control Register (WHCR) 


C000_0082h 



For more information about the RDMSR and WRMSR 
instructions, see the AMD K86™ Family BIOS and Software Tools 
Development Guide, order# 21062. 

MCAR and MCTR. The AMD-K6 processor does not support the 
generation of a machine check exception. However, the 
processor does provide a 64-bit Machine Check Address 
Register (MCAR), a 64-bit Machine Check Type Register 
(MCTR), and a Machine Check Enable (MCE) bit in CR4. 
Because the processor does not support machine check 
exceptions, the contents of the MCAR and MCTR are only 
affected by the WRMSR instruction and by RESET being 
sampled asserted (where all bits in each register are reset to 0). 

63 0 



MCAR 



Figure 27. Machine-Check Address Register (MCAR) 
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■ Reserved 



Figure 28. Machine-Check Type Register (MCTR) 

Test Register 12 (TR12). Test register 12 provides a method for 
disabling the LI caches. Figure 29 shows the format of TR12. 



63 4 3 2 10 





C 

1 




r- Symbol Description Bit 

► Reserved Cl Cache Inhibit Bit 3 


J 





Figure 29. Test Register 12 (TR12) 

Time Stamp Counter. With each processor clock cycle, the 
processor increments the 64-bit time stamp counter (TSC) 
MSR. Figure 30 shows the format of the TSC. 



63 



0 



TSC 



Figure 30. Time Stamp Counter (TSC) 
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Extended Feature Enable Register (EFER). The Extended Feature 
Enable Register (EFER) contains the control bits that enable 
the extended features of the AMD-K6. Figure 31 shows the 
format of the EFER register, and Table 6 defines the function 
of each bit in the EFER register. 



63 



0 




□ — ► Reserved 



Symbol Description Bit 
SCE System Call Extension 0 



Figure 31 . Extended Feature Enable Register (EFER) 

Table 6. Extended Feature Enable Register (EFER) Definition 



Bit 


Description 


R/W 


63-1 


Reserved 


R 


0 


System Call Extension (SCE) 


R/W 



SYSCALL Target Address Register (STAR). The SYSCALL Target 
Address Register (STAR) contains the target EIP address used 
by the SYSCALL instruction and the 16-bit selector base used 
by the SYSCALL and SYSRET instructions. Figure 32 shows 
the format of the STAR register, and Table 7 defines the 
function of each bit of the STAR register. 



63 



48 47 



32 31 



0 



G Selector and SS Selector 
Base 



Target EIP Address 



Reserved 



Figure 32. SYSCALL Target Address Register (STAR) 
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Table 7. SYSCALL Target Address Register (STAR) Definition 



Bit 


Description 


R/W 


63-48 


Reserved 


R 


47-32 


CS and SS Selector Base 


R/W 


31-0 


Target EIP Address 


R/W 



Write Handling Control Register (WHCR). The Write Handling Control 
Register (WHCR) is a MSR that contains three fields — the 
Write Allocate Enable Limit (WAELIM) field, the Write 
Allocate Enable 15-to-16-Mbyte (WAE15M) bit, and the Write 
Cacheability Detection Enable (WCDE) bit. Figure 33 shows the 
format of WHCR. See “Write Allocate” on page 8-7 for more 
information. 



63 


8 


7 1 


0 




W 

C 

D 


WAELIM 


w 

A 

E 

1 




E 




5 








M 



— ► Reserved 



Symbol Description Bits 

WCDE Write Cacheability Detection Enable 8 
WAELIM Write Allocate Enable Limit 7-1 

WAE15M Write Allocate Enable 15-to-l 6-Mbyte 0 

Note: Hardware RESET initializes this MSR to all zeros. 



Figure 33. Write Handling Control Register (WHCR) 

Memory The AMD-K6 MMX enhanced processor controls segmented 

Management memory management with the registers listed in Table 8. 

Registers Figure 34 shows the formats of these registers. 



Table 8. Memory Management Registers 



Register Name 


Function 


Global Descriptor Table Register 


Contains a pointer to the base of the Global Descriptor Table 


Interrupt Descriptor Table Register 


Contains a pointer to the base of the Interrupt Descriptor Table 


Local Descriptor Table Register 


Contains a pointer to the Local Descriptor Table of the current task 


Task Register 


Contains a pointer to the Task State Segment of the current task 
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Global and Interrupt Descriptor Table Registers 




Figure 34. Memory Management Registers 
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Paging The AMD-K6 MMX enhanced processor can address up to 4 

Gbytes of memory. This memory can be segmented into pages. 
The size of these pages is determined by the operating system 
design and the values set up in the Page Directory Entries 
(PDE) and Page Table Entries (PTE). The processor can access 
both 4-Kbyte pages and 4-Mbyte pages, and the page sizes can 
be intermixed within a page directory. When the Page Size 
Extension (PSE) bit in CR4 is set, the processor translates 
linear addresses using either the 4-Kbyte Translation 
Lookaside Buffer (TLB) or the 4-Mbyte TLB, depending on the 
state of the page size (PS) bit in the page directory entry. 
Figures 36 and 37 show how 4-Kbyte and 4-Mbyte page 
translations work. 



4-Kbyte 

Page Page Page 

Directory Table Frame 




Linear Address 



Figure 36. 4-Kbyte Paging Mechanism 
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4-Mbyte 

Page 

Frame 




Linear Address 



Figure 37. 4-Mbyte Paging Mechanism 

Figures 38 through 40 show the formats of the PDE and PTE. 
These entries contain information regarding the location of 
pages and their status. 
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31 12 11 10 9 8 7 6 5 4 3 2 1 0 




Svmbol 


Description 


Bits 


AVL 


Available to Software 


11-9 




Reserved 


8 


PS 


Page Size 


7 




Reserved 


6 


A 


Accessed 


5 


PCD 


Page Cache Disable 


4 


PWT 


Page Writethrough 


3 


U/S 


User/Supervisor 


2 


W/R 


Write/Read 


1 


P 


Present (valid) 


0 



Figure 38. Page Directory Entry 4-Kbyte Page Table (PDE) 



22 21 



12 11 10 98765432 1 0 







A 


| 


■ 


| 




P 


II 


m 


w 


■ 


Physical Page Base Address 


Reserved 


V 








A 


C 




H 


/ 


D 




L 


1 


1 


1 




D 


H 


■ 


R 


1 



Symbol 


Description 


Bits 


AVL 


Available to Software 


11-9 




Reserved 


8 


PS 


Page Size 


7 




Reserved 


6 


A 


Accessed 


5 


PCD 


Page Cache Disable 


4 


PWT 


Page Writethrough 


3 


u/s 


User/Supervisor 


2 


W/R 


Write/Read 


1 


P 


Present (valid) 


0 



Figure 39. Page Directory Entry 4-Mbyte Page Table (PDE) 
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Svmbol 


Description 


Bits 


AVL 


Available to Software 


11-9 — 




Reserved 


8-7 — 


D 


Dirty 


6 — 


A 


Accessed 


5 — 


PCD 


Page Cache Disable 


4 — 


PWT 


Page Writethrough 


3 — 


U/S 


User/Supervisor 


2 — 


W/R 


Writ^/Read 


1 — 


P 


Present (valid) 


0 — 



Figure 40. Page Table Entry (PTE) 

Descriptors and Gates There are various types of structures and registers in the x86 
architecture that define, protect, and isolate code segments, 
data segments, task state segments, and gates. These structures 
are called descriptors. 

Figure 41 on page 3-26 shows the application segment 
descriptor format. Table 9 contains information describing the 
memory segment type to which the descriptor points. The 
application segment descriptor is used to point to either a data 
or code segment. 

Figure 42 on page 3-27 shows the system segment descriptor 
format. Table 10 contains information describing the type of 
segment or gate to which the descriptor points. The system 
segment descriptor is used to point to a task state segment, a 
call gate, or a local descriptor table. 

The AMD-K6 MMX enhanced processor uses gates to transfer 
control between executable segments with different privilege 
levels. Figure 43 on page 3-28 shows the format of the gate 
descriptor types. Table 10 contains information describing the 
type of segment or gate to which the descriptor points. 
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Bits 

23 

22 

20 

15 

14-13 

12 

11-8 




Symbol 






■ Reserved 




31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 



Description 

Granularity 
32-Bit/I 6-Bit 
Available to Software 
Present/Valid Bit 
Descriptor Privilege Level 
Descriptor Type 
See Table 9 



Figure 41 . Application Segment Descriptor 



Table 9. Application Segment Types 



Type 


Data/Code 


Description 


0 


Data 


Read-Only 


1 


Read-Only -Accessed 


2 


Read/Write 


3 


Read/Write -Accessed 


4 


Read-Only- Expand-down 


5 


Read-Only- Expand-down, Accessed 


6 


Read/Write-Expand-down 


7 


Read/Write -Expand-down, Accessed 


8 


Code 


Execute-Only 


9 


Execute-Only-Accessed 


A 


Execute/Read 


B 


Execute/Read-Accessed 


C 


Execute-Only- Conforming 


D 


Execute-Only- Conforming, Accessed 


E 


Execute/Read-Only- Conforming 


F 


Execute/Read-Only- Conforming, Accessed 
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■ Reserved 



r 



31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 



Svmbol 


Description 


Bits 


G 


Granularity 


23 


X 


Not Needed 


22 


AVL 


Availability to Software 


20 


P 


Present/Valid Bit 


15 


DPL 


Descriptor Privilege Level 


14-13 


DT 


Descriptor Type 


12 


Type 


See Table 10 


11-8 


8 7 


6 5 4 3 2 10 





Base Address 31-24 


G 


X 


1 


A 

V 


Segment 


P 


DPL 


0 


Type 


Base Address 23-16 










L 


Limit 











Base Address 1 5-0 



Segment Limit 1 5-0 



Figure 42. System Segment Descriptor 



Table 10. System Segment and Gate Types 



Type 


Description 


0 


Reserved 


1 


Available 1 6-bit TSS 


2 


LDT 


3 


Busy 16-bit TSS 


4 


16-bit Call Gate 


5 


Task Gate 


6 


1 6-bit Interrupt Gate 


7 


16-bit Trap Gate 


8 


Reserved 


9 


Available 32-bit TSS 


A 


Reserved 


B 


Busy 32-bit TSS 


C 


32-bit Call Gate 


D 


Reserved 


E 


32-bit Interrupt Gate 


F 


32-bit Trap Gate 
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Bits 

15 

14-13 

12 

11-8 



31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 



Offset 31-16 


P 


DPL 


0 


Type 




Segment Selector 


Offset 15-0 



Figure 43. Gate Descriptor 



Exceptions and Table 11 summarizes the exceptions and interrupts. 

Interrupts 



■ Reserved 



Symbol Description 

- P Present/Valid Bit 

- DPL Descriptor Privilege Level 

- DT Descriptor Type 

■ Type See Table 10 



Table 11. Summary of Exceptions and Interrupts 



Interrupt 

Number 


Interrupt Type 


Cause 


0 


Divide by Zero Error 


DIV, IDIV 


1 


Debug 


Debug trap or fault 


2 


Non-Maskable Interrupt 


NMI signal sampled asserted 


3 


Breakpoint 


Int 3 


4 


Overflow 


INTO 


5 


Bounds Check 


BOUND 


6 


Invalid Opcode 


Invalid instruction 


7 


Device Not Available 


ESC and WAIT 


8 


Double Fault 


Fault occurs while handling a fault 


9 


Reserved - Interrupt 13 


- 


10 


Invalid TSS 


Task switch to an invalid segment 


11 


Segment Not Present 


Instruction loads a segment and present bit is 0 (invalid segment) 


12 


Stack Segment 


Stack operation causes limit violation or present bit is 0 


13 


General Protection 


Segment related or miscellaneous invalid actions 


14 


Page Fault 


Page protection violation or a reference to missing page 


16 


Floating-Point Error 


Arithmetic error generated by floating-point instruction 


17 


Alignment Check 


Data reference to an unaligned operand. (The AC flag and the AM bit of CR0 are 
set to 1 .) 


0-255 


Software Interrupt 


INT n 
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3.2 Instructions Supported by the AMD-K6™ Processor 

This section documents all of the x86 instructions supported by 
the AMD-K6 MMX enhanced processor. The following tables 
show the instruction mnemonic, opcode, modR/M byte, decode 
type, and RISC86 operation(s) for each instruction. Tables 12 
through 14 define the integer, floating-point, and MMX 
instructions, respectively. 

The first column in these tables indicates the instruction 
mnemonic and operand types with the following notations: 

■ reg8 — byte integer register defined by instruction byte(s) or 
bits 5, 4, and 3 of the modR/M byte 

■ mreg8 — byte integer register defined by bits 2, 1, and 0 of 
the modR/M byte 

■ regl6/32 — word and doubleword integer register defined by 
instruction byte(s) or bits 5, 4, and 3 of the modR/M byte 

■ mregl6/32 — word and doubleword integer register defined 
by bits 2, 1, and 0 of the modR/M byte 

■ mem8 — byte integer value in memory 

■ meml 6/32 — word or doubleword integer value in memory 

■ mem32/48 — doubleword or 48-bit integer value in memory 

■ mem48 — 48-bit integer value in memory 

■ mem64 — 64-bit value in memory 

■ imm8 — 8-bit immediate value 

■ imml 6/32 — 16-bit or 32-bit immediate value 

■ disp8 — 8-bit displacement value 

■ displ6/32 — 16-bit or 32-bit displacement value 

■ disp32/48 — doubleword or 48-bit displacement value 

■ eXX — register width depending on the operand size 

■ mem32real — 32-bit floating-point value in memory 

■ mem64real — 64-bit floating-point value in memory 

■ mem80real — 80-bit floating-point value in memory 

■ mmreg — MMX register 

■ mmregl — MMX register defined by bits 5, 4, and 3 of the 
modR/M byte 

■ mmreg2 — MMX register defined by bits 2, 1, and 0 of the 
modR/M byte 
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The second and third columns list all applicable opcode bytes. 

The fourth column lists the modR/M byte when used by the 
instruction. The modR/M byte defines the instruction as a 
register or memory form. If modR/M bits 7 and 6 are documented 
as mm (memory form), mm can only be 10b, 01b or 00b. 

The fifth column lists the type of instruction decode — short, 
long, and vector. The AMD-K6 decode logic can process two 
short, one long, or one vector decode per clock. 

The sixth column lists the type of RISC86 operation(s) required 
for the instruction. The operation types and corresponding 
execution units are as follows: 

d load , fload, mload — load unit 

□ store, f store, mstore — store unit 

□ alu — either of the integer execution units 

□ alux — integer X execution unit only 

□ branch — branch condition unit 

n float — floating-point execution unit 

□ meu — multimedia execution unit for MMX software 

□ limm — load immediate, instruction control unit 



Table 12. Integer Instructions 



Instruction Mnemonic 


First 

Byte 


Second 

Byte 


ModR/M 

Byte 


Decode 

Type 


RISC86* 

Opcodes 


AAA 


37h 






vector 




AAD 


D5h 


OAh 




vector 




AAM 


D4h 


OAh 




vector 




AAS 


3Fh 






vedor 




ADC mreg8, reg8 


lOh 




1 1 -xxx-xxx 


short 


alux 


ADC mem8, reg8 


lOh 




mm-xxx-xxx 


long 


load, alux, store 


ADC mregl6/32, regl 6/32 


1 1 h 




11 -xxx-xxx 


short 


alu 


ADC mem 16/32, regl 6/32 


llh 




mm-xxx-xxx 

. 


long 


load, alu, store 


ADC reg8, mreg8 


12h 




11 -xxx-xxx 


short 


alux 


ADC reg8, mem8 


12h 




mm-xxx-xxx 


short 


load, alux 


ADC regl 6/32, mregl6/32 


13h 




11 -xxx-xxx 


short 


alu 


ADC regl 6/32, meml6/32 


13h 




mm-xxx-xxx 


short 


load, alu 


ADC AL, imm8 


14h 




xx-xxx-xxx 


short 


alux 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


Second 

Byte 


ModR/M 

Byte 


Decode 

Type 


RISC86* 

Opcodes 


ADC EAX, imm 16/32 


15h 




xx-xxx-xxx 


short 


alu 


ADC mreg8, imm8 


80h 




11-010-xxx 


short 


alux 


ADC mem8, imm8 


80h 




mm-010-xxx 


long 


load, alux, store 


ADC mreg 16/32, imm16/32 


81 h 




11-010-xxx 


short 


alu 


ADC mem 16/32, imm 16/32 


81 h 




mm-010-xxx 


long 


load, alu, store 


ADC mregl6/32, imm8 (signed ext.) 


83h 




11-010-xxx 


short 


alux 


ADC mem 16/32, imm8 (signed ext.) 


83h 




mm-010-xxx 


long 


load, alux, store 


ADD mreg8, reg8 


OOh 




1 1 -xxx-xxx 


short 


alux 


ADD mem8, reg8 


OOh 




mm-xxx-xxx 


long 


load, alux, store 


ADD mregl6/32, regl 6/32 


Olh 




11 -xxx-xxx 


short 


alu 


ADD mem 16/32, regl 6/32 


Olh 




mm-xxx-xxx 


long 


load, alu, store 


ADD reg8, mreg8 


02h 




11 -xxx-xxx 


short 


alux 


ADD reg8, mem8 


02h 




mm-xxx-xxx 


short 


load, alux 


ADD regl 6/32, mregl6/32 


03h 




11 -xxx-xxx 


short 


alu 


ADD regl 6/32, mem 16/32 


03h 




mm-xxx-xxx 


short 


load, alu 


ADD AL, imm8 


04h 




xx-xxx-xxx 


short 


alux 


ADD EAX, imm 16/32 


05h 




xx-xxx-xxx 


short 


alu 


ADD mreg8, imm8 


80h 




11-000-xxx 


short 


alux 


ADD mem8, imm8 


80h 




mm-000-xxx 


long 


load, alux, store 


ADD mreg16/32, imml6/32 


81 h 




11-000-xxx 


short 


alu 


ADD mem 16/32, imm 16/32 


81h 




mm-000-xxx 


long 


load, alu, store 


ADD mregl6/32, imm8 (signed ext.) 


83h 




11-000-xxx 


short 


alux 


ADD mem 16/32, imm8 (signed ext.) 


83h 




mm-000-xxx 


long 


load, alux, store 


AND mreg8, reg8 


20h 




11 -xxx-xxx 


short 


alux 


AND mem8, reg8 


20h 




mm-xxx-xxx 


long 


load, alux, store 


AND mregl 6/32, regl 6/32 


21 h 




1 1 -xxx-xxx 


short 


alu 


AND mem16/32, regl 6/32 


21h 




mm-xxx-xxx 


long 


load, alu, store 


AND reg8, mreg8 


22h 




11 -xxx-xxx 


short 


alux 


AND reg8, mem8 


22h 




mm-xxx-xxx 


short 


load, alux 


AND regl 6/32, mregl 6/32 


23h 




11 -xxx-xxx 


short 


alu 


AND regl 6/32, mem 16/32 


23h 




mm-xxx-xxx 


short 


load, alu 


AND AL, imm8 


24h 




xx-xxx-xxx 


short 


alux 


AND EAX, imm 16/32 


25h 




xx-xxx-xxx 


short 


alu 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


Second 

Byte 


ModR/M 

Byte 


Decode 

Type 


RISC86* 

Opcodes 


AND mreg8, imm8 


80h 




11-100-xxx 


short 


alux 


AND mem8, imm8 


80h 




mm-100-xxx 


long 


load, alux, store 


AND mreg16/32, imm 16/32 


81h 




11-100-xxx 


short 


alu 


AND meml6/32, imml6/32 


81h 




mm-100-xxx 


long 


load, alu, store 


AND mregl6/32, imm8 (signed ext.) 


83h 




11-100-xxx 


short 


alux 


AND mem 16/32, imm8 (signed ext.) 


83h 




mm-100-xxx 


long 


load, alux, store 


ARPL mregl6, regl 6 


63h 




1 1 -xxx-xxx 


vector 




ARPL mem 16, regl 6 


63h 




mm-xxx-xxx 


vector 




BOUND 


62h 




xx-xxx-xxx 


vector 




BSF regl 6/32, mreg!6/32 


OFh 


BCh 


11 -xxx-xxx 


vector 




BSF regl 6/32, mem 16/32 


OFh 


BCh 


mm-xxx-xxx 


vector 




BSR regl 6/32, mregl6/32 


OFh 


BDh 


11 -xxx-xxx 


vector 




BSR regl 6/32, meml6/32 


OFh 


BDh 


mm-xxx-xxx 


vector 




BSWAP EAX 


OFh 


C8h 




long 


alu 


BSWAP ECX 


OFh 


C9h 




long 


alu 


BSWAP EDX 


OFh 


CAh 




long 


alu 


BSWAP EBX 


OFh 


CBh 




long 


alu 


BSWAP ESP 


OFh 


CCh 




long 


alu 


BSWAP EBP 


OFh 


CDh 




long 


alu 


BSWAP ESI 


OFh 


CEh 




long 


alu 


BSWAP EDI 


OFh 


CFh 




long 


alu 


BT mregl6/32, regl 6/32 


OFh 


A3h 


11 -xxx-xxx 


vector 




BT mem 16/32, regl 6/32 


OFh 


A3h 


mm-xxx-xxx 


vector 




BT mreg!6/32, imm8 


OFh 


BAh 


11-100-xxx 


vector 




BT mem 16/32, imm8 


OFh 


BAh 


mm-IOO-xxx 


vector 




BTC mregl6/32, regl 6/32 


OFh 


BBh 


11 -xxx-xxx 


vector 




BTC mem 16/32, regl 6/32 


OFh 


BBh 


mm-xxx-xxx 


vector 




BTC mregl6/32, imm8 


OFh 


BAh 


11-1 1 1-xxx 


vector 




BTC meml6/32, imm8 


OFh 


BAh 


mm-lll-xxx 


vector 




BTR mreg 16/32, regl 6/32 


OFh 


B3h 


11 -xxx-xxx 


vector 




BTR mem 16/32, regl 6/32 


OFh 


B3h 


mm-xxx-xxx 


vector 




BTR mregl6/32, imm8 


OFh 


BAh 


1 1-1 10-xxx 


vector 




BTR mem 16/32, imm8 


OFh 


BAh 


mm-110-xxx 


vector 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


BTS mreg16/32, regl 6/32 


OFh 


BTS mem 16/32, reg 16/32 


OFh 


BTS mregl6/32, imm8 


OFh 


BTS mem 16/32, imm8 


OFh 


CALL full pointer 


9Ah 


CALL near imm 16/32 


E8h 


CALL mem 16: 16/32 


FFh 


CALL near mreg32 (indirect) 


FFh 


CALL near mem32 (indirect) 


FFh 


CBW/CWDE EAX 


98h 


CLC 


F8h 


CLD 


FCh 


CLI 


FAh 


CLTS 


OFh 


CMC 


F5h 


CMP mreg8, reg8 


38h 


CMP mem8, reg8 


38h 


CMP mregl6/32, regl6/32 


39h 


CMP mem 16/32, reg 16/32 


39h 


CMP reg8, mreg8 


3Ah 


CMP reg8, mem8 


3Ah 


CMP regl 6/32, mregl6/32 


3Bh 


CMP regl 6/32, mem 16/32 


3Bh 


CMP AL, imm8 


3Ch 


CMP EAX, imm 16/32 


3Dh 


CMP mreg8, imm8 


80h 


CMP mem8, imm8 


80h 


CMP mregl6/32, imm!6/32 


81 h 


CMP mem 16/32, imm 16/32 


81 h 


CMP mreg!6/32, imm8 (signed ext.) 


83 h 


CMP mem 16/32, imm8 (signed ext.) 


83h 


CMPSB mem8,mem8 


A6h 


CMPSW meml6, mem32 


A7h 




ModR/M 

Byte 



1 1 -xxx-xxx 



mm-xxx-xxx 



11-101-xxx 



mm-101-xxx 





11-011-xxx 



11-010-xxx 



mm-010-xxx 




11 -xxx-xxx 



mm-xxx-xxx 



1 1 -xxx-xxx 



mm-xxx-xxx 



1 1 -xxx-xxx 



mm-xxx-xxx 



11 -xxx-xxx 



mm-xxx-xxx 



xx-xxx-xxx 



xx-xxx-xxx 



11-111-xxx 



mm-1 11 -xxx 



11-111-xxx 



mm-1 11 -xxx 



11-111-xxx 



mm-1 11 -xxx 



RISC86* 

Opcodes 




alux 



load, alux 



alu 



load, alu 



alux 



load, alux 



alu 



load, alu 



alux 



alu 



alux 



load, alux 



alu 



load, alu 



load, alu 



load, alu 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


Second 

Byte 


ModR/M 

Byte 


Decode 

Type 


RISC86* 

Opcodes 


CMPSD mem32, mem32 


A7h 






vector 




CMPXCHG mreg8, reg8 


OFh 


BOh 


11-xxx-xxx 


vector 




CMPXCHG mem8, reg8 


OFh 


BOh 


mm-xxx-xxx 


vector 




CMPXCHG mregl6/32, reg16/32 


OFh 


Blh 


11-xxx-xxx 


vector 




CMPXCHG mem 16/32, reg16/32 


OFh 


Blh 


mm-xxx-xxx 


vector 




CMPXCH8B EDX:EAX 


OFh 


C7h 


11-xxx-xxx 


vector 




CMPXCH8B mem64 


OFh 


C7h 


mm-xxx-xxx 


vector 




CPUID 


OFh 


A2h 




vector 




CWD/CDQ EDX, EAX 


99h 






vector 




DM 


27h 






vector 




DAS 


2Fh 






vector 




DEC EAX 


48h 






short 


alu 


DEC ECX 


49h 






short 


alu 


DEC EDX 


4Ah 






short 


alu 


DEC EBX 


4Bh 






short 


alu 


DEC ESP 


4Ch 






short 


alu 


DEC EBP 


4Dh 






short 


alu 


DEC ESI 


4Eh 






short 


alu 


DEC EDI 


4Fh 






short 


alu 


DEC mreg8 


FEh 




11-001-xxx 


vector 




DEC mem8 


FEh 




mm-001-xxx 


long 


load, alux, store 


DEC mreg16/32 


FFh 




11-001-xxx 


vector 




DEC mem 16/32 


FFh 




mm-001-xxx 


long 


load, alu, store 


DIV AL, mreg8 


F6h 




11-110-xxx 


vector 




D1V AL, mem8 


F6h 




mm-110-xx 


vector 




DIV EAX, mregl 6/32 


F7h 




11-110-xxx 


vector 




DIV EAX, mem 16/32 


F7h 




mm-110-xx 


vector 




IDIV mreg8 


F6h 




11-111-xxx 


vector 




IDIV mem8 


F6h 




mm-111-xx 


vector 




IDIV EAX, mregl 6/32 


F7h 




11-11 1-xxx 


vector 




IDIV EAX, mem 16/32 


F7h 




mm-111-xx 


vector 




1MUL reg16/32, imm16/32 


69h 




11-xxx-xxx 


vector 




IMUL regl 6/32, mregl 6/32, imm16/32 


69h 




11-xxx-xxx 


vector 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


IMUL regl 6/32, meml6/32, imml6/32 


69h 


IMUL regl 6/32, imm8 (sign extended) 


6Bh 


IMUL regl 6/32, mregl6/32, imm8 
(signed) 


6Bh 


IMUL regl 6/32, mem 16/32, imm8 
(signed) 


6Bh 


IMUL AX, AL, mreg8 


F6h 


IMUL AX, AL, mem8 


F6h 


IMUL EDX:EAX, EAX, mregl6/32 


F7h 


IMUL EDXiEAX, EAX, meml6/32 


F7h 


IMUL regl 6/32, mregl6/32 


OFh 


IMUL regl 6/32, meml6/32 


OFh 


INC EAX 


40h 


INC ECX 


41 h 


INC EDX 


42h 


INC EBX 


43h 


INC ESP 


44h 


INC EBP 


45h 


INC ESI 


46h 


INC EDI 


47h 


INC mreg8 


FEh 


INC mem8 


FEh 


INC mregl6/32 


FFh 


INC mem 16/32 


FFh 


INVD 


OFh 


INVLPG 


OFh 


JO short disp8 


70h 


JB/JNAE short disp8 


71 h 


JNO short disp8 


71 h 


JNB/JAE short disp8 


73h 


JZ/JE short disp8 


74h 


JNZ/JNE short disp8 


75h 


JBE/JNA short disp8 


76h 


JNBE/JA short disp8 


77h 





ModR/M 

Byte 

mm-xxx-xxx 
1 1 -xxx-xxx 

1 1 -xxx-xxx 

mm-xxx-xxx 

11 -101 -xxx 
mm-101-xx 
11-101-xxx 
mm-101-xx 
11 -xxx-xxx 
mm-xxx-xxx 




11-000-xxx 

mm-000-xxx 

11-000-xxx 

mm-000-xxx 




Decode 

Type 

vector 

vector 



vector 



vector 



vector 

vector 

vector 

vector 

vector 

vector 

short 

short 

short 

short 

short 

short 

short 

short 

vector 

long 

vector 

long 

vector 



vector 

short 

short 

short 

short 

short 

short 

short 

short 





alu 




alu 



load, alux, store 



load, alu, store 




branch 

branch 

branch 

branch 

branch 

branch 

branch 

branch 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


Second 

Byte 


ModR/M 

Byte 


Decode 

Type 


RISC86* 

Opcodes 


JS short disp8 


78h 






short 


branch 


JNS short disp8 


79h 






short 


branch 


JP/JPE short disp8 


7Ah 






short 


branch 


JNP/JPO short disp8 


7Bh 






short 


branch 


JL/JNGE short disp8 


7Ch 






short 


branch 


JNL/JGE short disp8 


7Dh 






short 


branch 


JLE/JNG short disp8 


7Eh 






short 


branch 


JNLE/JG short disp8 


7Fh 






short 


branch 


JCXZ/JEC short disp8 


E3h 






vector 




JO near displ 6/32 


OFh 


80h 




short 


branch 


JNO near displ 6/32 


OFh 


81 h 




short 


branch 


JB/JNAE near displ 6/32 


OFh 


82h 




short 


branch 


JNB/JAE near displ 6/32 


OFh 


83h 




short 


branch 


JZ/JEnear displ 6/32 


OFh 


84h 




short 


branch 


JNZ/JNE near displ 6/32 


OFh 


85h 




short 


branch 


JBE/JNA near displ 6/32 


OFh 


86h 




short 


branch 


JNBE/JA near displ 6/32 


OFh 


87h 




short 


branch 


JS near displ 6/32 


OFh 


88h 




short 


branch 


JNS near displ 6/32 


OFh 


89h 




short 


branch 


JP/JPE near displ 6/32 


OFh 


8Ah 




short 


branch 


JNP/JPO near displ 6/32 


OFh 


8Bh 




short 


branch 


JL/JNGE near displ 6/32 


OFh 


8Ch 




short 


branch 


JNL/JGE near displ 6/32 


OFh 


8Dh 




short 


branch 


JLE/JNG near displ 6/32 


OFh 


8Eh 




short 


branch 


JNLE/JG near displ 6/32 


OFh 


8Fh 




short 


branch 


JMP near displ 6/32 (direct) 


E9h 






short 


branch 


JMP far disp32/48 (direct) 


EAh 






vector 




JMP disp8 (short) 


EBh 






short 


branch 


JMP far mreg32 (indirect) 


EFh 




1 1-101-xxx 


vector 




JMP far mem32 (indirect) 


EFh 




mm-101-xxx 


vector 




JMP near mregl 6/32 (indirect) 


FFh 




11-100-xxx 


vector 




JMP near meml6/32 (indirect) 


FFh 




mm-100-xxx 


vector 




LAHF 


9Fh 






vector 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


LAR regl 6/32, mregl6/32 


OFh 


LAR regl 6/32, meml6/32 


OFh 


LDS regl 6/32, mem32/48 


C5h 


LEA regl 6/32, mem 16/32 


8Dh 


LEAVE 


C9h 


LES regl 6/32, mem32/48 


C4h 


LFS regl 6/32, mem32/48 


OFh 


LGDT mem48 


OFh 


LGS regl 6/32, mem32/48 


OFh 


LIDT mem48 


OFh 


LLDT mregl6 


OFh 


LLDT mem 16 


OFh 


LMSW mregl6 


OFh 


LMSW mem 16 


OFh 


LODSB AL, mem8 


ACh 


LODSW AX, mem 16 


ADh 


LODSD EAX, mem32 


ADh 


LOOP disp8 


E2h 


LOOPE/LOOPZ disp8 


Elh 


LOOPNE/LOOPNZ disp8 


EOh 


LSL regl 6/32, mregl6/32 


OFh 


LSL regl 6/32, mem 16/32 


OFh 


LSS regl 6/32, mem32/48 


OFh 


LTRmregl6 


OFh 


LTR mem 16 


OFh 


MOV mreg8, reg8 


88h 


MOV mem8, reg8 


88h 


MOV mregl6/32, regl 6/32 


89h 


MOV mem 16/32, regl 6/32 


89h 


MOV reg8, mreg8 


8Ah 


MOV reg8, mem8 


8Ah 


MOV regl 6/32, mregl6/32 


8Bh 


MOV regl 6/32, mem 16/32 


8Bh 




ModR/M 

Byte 



1 1 -xxx-xxx 



mm-xxx-xxx 



mm-xxx-xxx 



mm-xxx-xxx 





mm-011-xxx 



11-010-xxx 



mm-010-xxx 



1 1-100-xxx 



mm-100-xxx 




11 -xxx-xxx 



mm-xxx-xxx 



mm-xxx-xxx 



1 1-01 1-xxx 



mm-011-xxx 



11 -xxx-xxx 



mm-xxx-xxx 



11 -xxx-xxx 



mm-xxx-xxx 



1 1 -xxx-xxx 



mm-xxx-xxx 



11 -xxx-xxx 



mm-xxx-xxx 



RISC86* 

Opcodes 




load, alu 



load, alu, alu 




load, alux 



load, alu 



load, alu 



alu, branch 



Software Environment 



3-37 



































































































































































AMDtl Preliminary Information 

AMD-K6™ MMX™ Enhanced Processor Data Sheet 



20695E/0— June 1997 



Table 12. Integer Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


Second 

Byte 


ModR/M 

Byte 


Decode 

Type 


RISC86* 

Opcodes 


MOV mregl6, segment reg 


8Ch 




1 1 -xxx-xxx 


long 


load 


MOV meml6, segment reg 


8Ch 




mm-xxx-xxx 


vector 




MOV segment reg, mreg16 


8 Eh 




11 -xxx-xxx 


vector 




MOV segment reg, mem 16 


8Eh 




mm-xxx-xxx 


vector 




MOV AL, mem8 


AOh 






short 


load 


MOV EAX, mem 16/32 


Alh 






short 


load 


MOV mem8, AL 


A2h 






short 


store 


MOV mem 16/32, EAX 


A3h 






short 


store 


MOV AL, imm8 


BOh 






short 


limm 


MOV CL, imm8 


Blh 






short 


limm 


MOV DL, imm8 


B2h 






short 


limm 


MOV BL, imm8 


B3h 






short 


limm 


MOV AH, imm8 


B4h 






short 


limm 


MOV CH, imm8 


B5h 






short 


limm 


MOV DH, imm8 


B6h 






short 


limm 


MOV BH, imm8 


B7h 






short 


limm 


MOV EAX, imm 16/32 


B8h 






short 


limm 


MOV ECX,imm 16/32 


B9h 






short 


limm 


MOV EDX, imm 16/32 


BAh 






short 


limm 


MOV EBX, imm 16/32 


BBh 






short 


limm 


MOV ESP, imml 6/32 


BCh 






short 


limm 


MOV EBP, imm 16/32 


BDh 






short 


limm 


MOV ESI, imml 6/32 


BEh 






short 


limm 


MOV EDI, imml 6/32 


BFh 






short 


limm 


MOV mreg8, imm8 


C6h 




11-000-xxx 


short 


limm 


MOV mem8, imm8 


C6h 




mm-000-xxx 


long 


store 


MOV regl 6/32, imml 6/32 


C7h 




11-000-xxx 


short 


limm 


MOV meml6/32, imml 6/32 


C7h 




mm-000-xxx 


long 


store 


MOVSB mem8,mem8 


A4h 






long 


load, store, alux, alux 


MOVSD mem 16, mem 16 


A5h 






long 


load, store, alu, alu 


MOVSW mem32, mem32 


A5h 






long 


load, store, alu, alu 


MOVSX regl 6/32, mreg8 


OFh 


BEh 


11 -xxx-xxx 


short 


alu 


MOVSX regl 6/32, mem8 


OFh 


BEh 


mm-xxx-xxx 


short 


load, alu 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


Second 

Byte 


ModR/M 

Byte 




RISC86* 

Opcodes 


MOVSX reg32, mreg16 


OFh 


BFh 


11-xxx-xxx 


short 


alu 


MOVSXreg32, mem 16 


OFh 


BFh 


mm-xxx-xxx 


short 


load, alu 


MOVZX regl 6/32, mreg8 


OFh 


B6h 


1 1 -xxx-xxx 


short 


alu 


MOVZX regl 6/32, mem8 


OFh 


B6h 


mm-xxx-xxx 


short 


load, alu 


MOVZX reg32, mreg16 


OFh 


B7h 


11-xxx-xxx 


short 


alu 


MOVZX reg32, mem 16 


OFh 


B7h 


mm-xxx-xxx 


short 


load, alu 


MUL AL, mreg8 


F6h 




11-100-xxx 


vector 




MUL AL, mem8 


F6h 




mm-100-xx 


vector 




MUL EAX, mregl 6/32 


F7h 




11-100-xxx 


vector 




MUL EAX, meml6/32 


F7h 




mm-100-xx 


vector 




NEG mreg8 


F6h 




11-011 -xxx 


short 


alux 


NEG mem8 


F6h 




mm-011-xx 


vector 




NEG mregl 6/32 


F7h 




1 1-01 1-xxx 


short 


alu 


NEG mem 16/32 


F7h 




mm-011-xx 


vector 




NOP (XCHG AX, AX) 


90h 






short 


limm 


NOT mreg8 


F6h 




1 l-010-xxx 


short 


alux 


NOT mem8 


F6h 




mm-010-xx 


vector 




NOT mregl 6/32 


F7h 




11-010-xxx 


short 


alu 


NOT mem 16/32 


F7h 




mm-010-xx 


vector 




OR mreg8, reg8 


08h 




11-xxx-xxx 


short 


alux 


OR mem8, reg8 


08h 




mm-xxx-xxx 


long 


load, alux, store 


OR mregl 6/32, regl 6/32 


09h 




11-xxx-xxx 


short 


alu 


OR mem 16/32, regl 6/32 


09h 




mm-xxx-xxx 


long 


load, alu, store 


OR reg8, mreg8 


OAh 




1 1 -xxx-xxx 


short 


alux 


OR reg8, mem8 


OAh 




mm-xxx-xxx 


short 


load, alux 


OR regl 6/32, mregl 6/32 


OBh 




11-xxx-xxx 


short 


alu 


OR regl 6/32, mem 16/32 


OBh 




mm-xxx-xxx 


short 


load, alu 


OR AL, imm8 


OCh 




xx-xxx-xxx 


short 


alux 


OR EAX, imm 16/32 


ODh 




xx-xxx-xxx 


short 


alu 


OR mreg8, imm8 


80h 




11 -001 -xxx 


short 


alux 


OR mem8, imm8 


80h 




mm-001-xxx 


long 


load, alux, store 


OR mregl 6/32, imm 16/32 


81 h 




11 -001 -xxx 


short 


alu 


OR mem 16/32, imm 16/32 


81 h 




mm-00 1-xxx 


long 


load, alu, store 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


Second 

Byte 


ModR/M 

Byte 


Decode 

Type 


RISC86* 

Opcodes 


OR mreg16/32, imm8 (signed ext.) 


83h 




11 -001 -xxx 


short 


alux 


OR mem 16/32, imm8 (signed ext.) 


83 h 




mm-001-xxx 


long 


load, alux, store 


POP ES 


07h 






vector 




POP SS 


17h 






vector 




POP DS 


lFh 






vector 




POPFS 


OFh 


Alh 




vector 




POP GS 


OFh 


A9h 




vector 




POPEAX 


58h 






short 


load, alu 


POP ECX 


59h 






short 


load, alu 


POP EDX 


5Ah 






short 


load, alu 


POP EBX 


5Bh 






short 


load, alu 


POP ESP 


5Ch 






short 


load, alu 


POP EBP 


5Dh 






short 


load, alu 


POP ESI 


5Eh 






short 


load, alu 


POP EDI 


5Fh 






short 


load, alu 


POP mreg 


8Fh 




1 1 -000-xxx 


short 


load, alu 


POP mem 


8Fh 




mm-000-xxx 


long 


load, store, alu 


POPA/POPAD 


61 h 






vector 




POPF/POPFD 


9Dh 






vector 




PUSH ES 


06h 






long 


load, store 


PUSH CS 


OEh 






vector 




PUSH FS 


OFh 


AOh 




vector 




PUSH GS 


OFh 


A8h 




vector 




PUSH SS 


16h 






vector 




PUSH DS 


1 Eh 






long 


load, store 


PUSHEAX 


50h 






short 


store 


PUSH ECX 


51h 






short 


store 


PUSH EDX 


52h 






short 


store 


PUSH EBX 


53h 






short 


store 


PUSH ESP 


54h 






short 


store 


PUSH EBP 


55h 






short 


store 


PUSH ESI 


56h 






short 


store 


PUSH EDI 


57h 






short 


store 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 



PUSH imm8 



PUSH imm 16/32 



PUSH mregl 6/32 



PUSH mem 16/32 



PUSHA/PUSHAD 



PUSHF/PUSHFD 



RCL mreg8, imm8 



RCL mem8, imm8 



RCL mregl 6/32, imm8 



RCL mem 16/32, imm8 



RCL mreg8, 1 



RCL mem8, 1 



RCL mregl 6/32, 1 



RCL mem 16/32, 1 



RCL mreg8, CL 



RCL mem8, CL 



RCL mregl 6/32, CL 



RCL mem 16/32, CL 



RCR mreg8, imm8 



RCR mem8, imm8 



RCR mregl 6/32, imm8 



RCR mem 16/32, imm8 



RCR mreg8, 1 



RCR mem8, 1 



RCR mregl 6/32, 1 



RCR mem 16/32, 1 



RCR mreg8, CL 



RCR mem8, CL 



RCR mregl 6/32, CL 



RCR mem 16/32, CL 



RET near imm 16 



RET near 



RET far imm 16 



RISC86* 

Opcodes 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


Second 

Byte 


ModR/M 

Byte 


Decode 

Type 


RISC86* 

Opcodes 


RET far 


CBh 






vector 




ROL mreg8, imm8 


COh 




11-000-xxx 


vector 




ROL mem8, imm8 


COh 




mm-000-xxx 


vector 




ROL mregl 6/32, imm8 


Clh 




11-000-xxx 


vector 




ROL mem 16/32, imm8 


Cl h 




mm-000-xxx 


vector 




ROL mreg8, 1 


DOh 




11-000-xxx 


vector 




ROL mem8, 1 


DOh 




mm-000-xxx 


vector 




ROL mreg 16/32, 1 


Dlh 




11-000-xxx 


vector 




ROL mem 16/32, 1 


Dlh 




mm-000-xxx 


vector 




ROL mreg8, CL 


D2h 




11-000-xxx 


vector 




ROL mem8, CL 


D2h 




mm-OOO-xxx 


vector 




ROL mregl 6/32, CL 


D3h 




11-000-xxx 


vector 




ROL mem 16/32, CL 


D3h 




mm-OOO-xxx 


vector 




ROR mreg8, imm8 


COh 




11 -001 -XXX 


vector 




ROR mem8, imm8 


COh 




mm-001-xxx 


vector 




ROR mregl 6/32, imm8 


Clh 




11-001-xxx 


vector 




ROR mem 16/32, imm8 


Clh 




mm-001-xxx 


vector 




ROR mreg8, 1 


DOh 




11-001-xxx 


vector 




ROR mem8, 1 


DOh 




mm-001-xxx 


vector 




ROR mregl 6/32, 1 


Dlh 




11-001-xxx 


vector 




ROR mem 16/32, 1 


Dlh 




mm-001-xxx 


vector 




ROR mreg8, CL 


D2h 




11-001-xxx 


vector 




ROR mem8, CL 


D2h 




mm-001-xxx 


vector 




ROR mregl 6/32, CL 


D3h 




11-001-xxx 


vector 




ROR mem 16/32, CL 


D3h 




mm-001-xxx 


vector 




SAHF 


9 Eh 






vector 




SAR mreg8, imm8 


COh 




ll-111-xxx 


short 


alux 


SAR mem8, imm8 


COh 




mm-lll-xxx 


vector 




SAR mregl 6/32, imm8 


Clh 




11-111-xxx 


short 


alu 


SAR mem 16/32, imm8 


Clh 




mm-111-xxx 


vector 




SAR mreg8, 1 


DOh 




11-111-xxx 


short 


alux 


SAR mem8, 1 


DOh 




mm-111-xxx 


vector 




SAR mregl 6/32, 1 


Dlh 




11-111-xxx 


short 


alu 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 



SAR mem 16/32, 1 



SAR mreg8, CL 



SAR mem8, CL 



SAR mreg!6/32, CL 



SAR mem 16/32, CL 



SBB mreg8, reg8 



SBB mem8, reg8 



SBB mregl 6/32, reg!6/32 



SBB mem 16/32, regl 6/32 



SBB reg8, mreg8 



SBB reg8, mem8 



SBB regl 6/32, mregl 6/32 



SBB regl 6/32, mem 16/32 



SBB AL, imm8 



SBB EAX, imm 16/32 



SBB mreg8, imm8 



SBB mem8, imm8 



SBB mregl 6/32, imml6/32 



SBB meml6/32, imm16/32 



SBB mreg8, imm8 (signed ext.) 



SBB mem8, imm8 (signed ext.) 



SCASB AL, mem8 



SCASW AX, mem 16 



SCASD EAX, mem32 



SETO mreg8 



SETO mem8 



SETNO mreg8 



SETNO mem8 



SETB/SETNAE mreg8 



SETB/SETNAE mem8 



SETNB/SETAE mreg8 



SETNB/SETAE mem8 



SETZ/SETE mreg8 




RISC86* 

Opcodes 




load, alu, store 



alux 



load, alux 



alu 



load, alu 



alux 



alu 



alux 



load, alux, store 



alu 



load, alu, store 



alux 



load, alux, store 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


Second 

Byte 


ModR/M 

Byte 


Decode 

Type 


RISC86* 

Opcodes 


SETZ/SETE mem8 


OFh 


94h 


mm-m-xxx 


vector 




SETNZ/SETNE mreg8 


OFh 


95h 


1 1 -xxx-xxx 


vector 




SETNZ/SETNE mem8 


OFh 


95h 


mm-xxx-xxx 


vector 




SETBE/SETNA mreg8 


OFh 


96h 


11 -xxx-xxx 


vector 




SETBE/SETNA mem8 


OFh 


96h 


mm-xxx-xxx 


vector 




SETNBE/SETA mreg8 


OFh 


97h 


1 1 -xxx-xxx 


vector 




SETNBE/SETA mem8 


OFh 


97h 


mm-xxx-xxx 


vector 




SETS mreg8 


OFh 


98h 


11 -xxx-xxx 


vector 




SETS mem8 


OFh 


98h 


mm-xxx-xxx 


vector 




SETNS mreg8 


OFh 


99h 


11 -xxx-xxx 


vector 




SETNS mem8 


OFh 


99h 


mm-xxx-xxx 


vector 




SETP/SETPE mreg8 


OFh 


9Ah 


11 -xxx-xxx 


vector 




SETP/SETPE mem8 


OFh 


9Ah 


mm-xxx-xxx 


vector 




SETNP/SETPO mreg8 


OFh 


9Bh 


11 -xxx-xxx 


vector 




SETNP/SETPO mem8 


OFh 


9Bh 


mm-xxx-xxx 


vector 




SETL/SETNGE mreg8 


OFh 


9Ch 


11 -xxx-xxx 


vector 




SETL/SETNGE mem8 


OFh 


9Ch 


mm-xxx-xxx 


vector 




SETNL/SETGE mreg8 


OFh 


9Dh 


11 -xxx-xxx 


vector 




SETNL/SETGE mem8 


OFh 


9Dh 


mm-xxx-xxx 


vector 




SETLE/SETNG mreg8 


OFh 


9Eh 


1 1 -xxx-xxx 


vector 




SETLE/SETNG mem8 


OFh 


9Eh 


mm-xxx-xxx 


vector 




SETNLE/SETG mreg8 


OFh 


9Fh 


11 -xxx-xxx 


vector 




SETNLE/SETG mem8 


OFh 


9Fh 


mm-xxx-xxx 


vector 




SGDT mem48 


OFh 


Olh 


mm-000-xxx 


vector 




SIDT mem48 


OFh 


Olh 


mm-001-xxx 


vector 




SHL/SAL mreg8, imm8 


COh 




11-1 00-xxx 


short 


aiux 


SHL/SAL mem8, imm8 


COh 




mm-100-xxx 


vector 




SHL/SAL mreg16/32, imm8 


Clh 




11-1 OO-xxx 


short 


alu 


SHL/SAL mem 16/32, imm8 


Clh 




mm- 1 OO-xxx 


vector 




SHL/SAL mreg8, 1 


DOh 




11-1 OO-xxx 


short 


alux 


SHL/SAL mem8, 1 


DOh 




mm- 1 0O-xxx 


vector 




SHL/SAL mreg 16/32, 1 


Dlh 




11-1 OO-xxx 


short 


alu 


SHL/SAL mem 16/32, 1 


Dlh 




mm-1 OO-xxx 


vector 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 


m 


Second 

Byte 


ModR/M 

Byte 


Decode 

Type 


SHL/SAL mreg8, CL 


D2h 




11-100-xxx 


short 


SHL/SAL mem8, CL 


D2h 




mm-100-xxx 


vector 


SHL/SAL mregl 6/32, CL 


D3h 




11-100-xxx 


short 


SHL/SAL mem 16/32, CL 


D3h 




mm-100-xxx 


vector 


SHR mreg8, imm8 


COh 




1 1 -1 01 -xxx 


short 


SHR mem8, imm8 


COh 




mm-101-xxx 


vector 


SHR mregl 6/32, imm8 


Clh 




11-101-xxx 


short 


SHR mem 16/32, imm8 


Clh 




mm-101-xxx 


vector 


SHR mreg8, 1 


DOh 




11-101-xxx 


short 


SHR mem8, 1 


DOh 




mm-101-xxx 


vector 


SHR mregl 6/32, 1 


Dlh 




11-101-xxx 


short 


SHR mem 16/32, 1 


Dlh 




mm-101-xxx 


vector 


SHR mreg8, CL 


D2h 




11-101-xxx 


short 


SHR mem8, CL 


D2h 




mm-101-xxx 


vector 


SHR mregl 6/32, CL 


D3h 




11-101-xxx 


short 


SHR mem 16/32, CL 


D3h 




mm-101-xxx 


vector 


SHLD mregl 6/32, regl 6/32, imm8 


OFh 


A4h 


1 1 -xxx-xxx 


vector 


SHLD mem!6/32, regl 6/32, imm8 


OFh 


A4h 


mm-xxx-xxx 


vector 


SHLD mregl 6/32, regl 6/32, CL 


OFh 


A5h 


11 -xxx-xxx 


vector 


SHLD meml6/32, regl 6/32, CL 


OFh 


A5h 


mm-xxx-xxx 


vector 


SHRD mregl 6/32, regl 6/32, imm8 


OFh 


ACh 


11 -xxx-xxx 


vector 


SHRD meml6/32, regl 6/32, imm8 


OFh 


ACh 


mm-xxx-xxx 


vector 


SHRD mregl 6/32, regl 6/32, CL 


OFh 


ADh 


11 -xxx-xxx 


vector 


SHRD mem 16/32, regl6/32, CL 


OFh 


ADh 


mm-xxx-xxx 


vector 


SLDT mregl 6 


OFh 


OOh 


11-000-xxx 


vector 


SLDT meml6 


OFh 


OOh 


mm-ooo-xxx 


vector 


SMSW mregl 6 


OFh 


Olh 


11-100-xxx 


vector 


SMSW mem 16 


OFh 


Olh 


mm-100-xxx 


vector 


STC 


F9h 






vector 


STD 


FDh 






vector 


STI 


FBh 






vector 


STOSB mem8, AL 


AAh 






long 


STOSWmeml6, AX 


ABh 






long 




store, alux 
store, alu 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


Second 

Byte 


ModR/M 

Byte 


Decode 

Type 


RISC86* 

Opcodes 


STOSD mem32, EAX 


ABh 






long 


store, alu 


STR mreg16 


OFh 


OOh 


11 -001 -XXX 


vector 




STR mem 16 


OFh 


OOh 


mm-001-xxx 


vector 




SUB mreg8, reg8 


28h 




1 1-xxx-xxx 


short 


alux 


SUB mem8, reg8 


28h 




mm-xxx-xxx 


long 


load, alux, store 


SUB mregl6/32, regl6/32 


29h 




1 1-xxx-xxx 


short 


alu 


SUB meml6/32, reg!6/32 


29h 




mm-xxx-xxx 


long 


load, alu, store 


SUB reg8, mreg8 


2Ah 




1 1-xxx-xxx 


short 


alux 


SUB reg8, mem8 


2Ah 




mm-xxx-xxx 


short 


load, alux 


SUB regl 6/32, mregl6/32 


2Bh 




1 1-xxx-xxx 


short 


alu 


SUB reg 16/32, mem 16/32 


2Bh 




mm-xxx-xxx 


short 


load, alu 


SUB AL, imm8 


2Ch 




xx-xxx-xxx 


short 


alux 


SUB EAX, imml 6/32 


2Dh 




xx-xxx-xxx 


short 


alu 


SUB mreg8, imm8 


80h 




n-ioi-xxx 


short 


alux 


SUB mem8, imm8 


80h 




mm-101-xxx 


long 


load, alux, store 


SUB mregl6/32, imml 6/32 


81 h 




ll-101-xxx 


short 


alu 


SUB meml6/32, imml6/32 


81 h 




mm-101-xxx 


long 


load, alu, store 


SUB mregl6/32, imm8 (signed ext.) 


83h 




11-101-xxx 


short 


alux 


SUB mem 16/32, imm8 (signed ext.) 


83h 




mm-101-xxx 


long 


load, alux, store 


SYSCALL 


OFh 


05h 




vector 




SYSRET 


OFh 


07h 




vector 




TEST mreg8, reg8 


84h 




1 1-xxx-xxx 


short 


alux 


TEST mem8, reg8 


84h 




mm-xxx-xxx 


vector 




TEST mregl6/32, regl 6/32 


85h 




1 1-xxx-xxx 


short 


alu 


TEST mem 16/32, regl 6/32 


85h 




mm-xxx-xxx 


vector 




TEST AL, imm8 


A8h 






long 


alux 


TEST EAX, Imml 6/32 


A9h 






long 


alu 


TEST mreg8, imm8 


F6h 




11-000-xxx 


long 


alux 


TEST mem8, imm8 


F6h 




mm-OOO-xx 


long 


load, alux 


TEST mreg8, imml 6/32 


F7h 




11-000-xxx 


long 


alu 


TEST mem8, imml 6/32 


F7h 




mm-OOO-xx 


long 


load, alu 


VERR mregl6 


OFh 


OOh 


11-100-xxx 


vector 




VERR mem 16 


OFh 


OOh 


mm-100-xxx 


vector 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 



VERW mregl 6 



VERWmem16 



WAIT 



XADD mreg8, reg8 



XADD mem8, reg8 



XADD mregl 6/32, reg!6/32 



XADD mem 16/32, reg!6/32 



XCHG reg8, mreg8 



XCHG reg8, mem8 



XCHG reg16/32, mreg16/32 



XCHG regl 6/32, mem 16/32 



XCHG EAX, EAX 



XCHG EAX, ECX 



XCHG EAX, EDX 



XCHG EAX, EBX 



XCHG EAX, ESP 



XCHG EAX, EBP 



XCHG EAX, ESI 



XCHG EAX, EDI 



XLAT 



XOR mreg8, reg8 



XOR mem8, reg8 



XOR mregl 6/32, regl 6/32 



XOR meml 6/32, regl 6/32 



XOR reg8, mreg8 



XOR reg8, mem8 



XOR regl 6/32, mregl 6/32 



XOR regl 6/32, mem 16/32 



XOR AL, imm8 



XOR EAX, imm 16/32 



XOR mreg8, imm8 



XOR mem8, imm8 



XOR mregl 6/32, imml 6/32 



Second 

Byte 


ModR/M 

Byte 


ooh 


11-101-xxx 


ooh 


mm-101-xxx 






COh 


11-100-xxx 


COh 


mm-100-xxx 


Clh 


11-101-xxx 


Clh 


mm-101-xxx 



RISC86 X 

Opcodes 



1 1 -xxx-xxx 



mm-xxx-xxx 



11 -xxx-xxx 



mm-xxx-xxx 



1 1 -xxx-xxx 



mm-xxx-xxx 



11 -xxx-xxx 



mm-xxx-xxx 



11 -xxx-xxx 



mm-xxx-xxx 



1 1 -xxx-xxx 



mm-xxx-xxx 



xx-xxx-xxx 



xx-xxx-xxx 



1 1-1 10-xxx 



mm-110-xxx 



11-1 10-xxx 




limm 



alu, alu, alu 



alu, alu, alu 



alu, alu, alu 



alu, alu, alu 



alu, alu, alu 



alu, alu, alu 



alu, alu, alu 



alux 



load, alux, store 



alu 



load, alu, store 



short alux 



short load, alux 



short alu 



short load, alu 



short alux 



short alu 



short alux 



long load, alux, store 



short alu 
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Table 12. Integer Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


Second 

Byte 


ModR/M 

Byte 


Decode 

Type 


RISC86* 

Opcodes 


XOR mem16/32, imml6/32 


81 h 




mm-110-xxx 


long 


load, alu, store 


XOR mreg16/32, imm8 (signed ext.) 


83h 




1 1-1 10-XXX 


short 


alux 


XOR mem!6/32, imm8 (signed ext.) 


83h 




mm-110-xxx 


long 


load, alux, store 



Table 13. Floating-Point Instructions 



Instruction Mnemonic 


m 


F2XM1 


D9h 


FABS 


D9h 


FADD ST(0), ST(i) 


D8h 


FADD ST(0), mem32real 


D8h 


FADD ST(i), ST(0) 


DCh 


FADD ST(0), mem64real 


DCh 


FAD DP ST(i), ST(0) 


DEh 


FBLD 


DFh 


FBSTP 


DFh 


FCHS 


D9h 


FCLEX 


DBh 


FCOM ST(0), ST(i) 


D8h 


FCOM ST(0), mem32real 


D8h 


FCOM ST(0), mem64real 


DCh 


FCOMP ST(0), ST(i) 


D8h 


FCOMP ST(0), mem32real 


D8h 


FCOMP ST(0), mem64real 


DCh 


FCOMPP 


DEh 


FCOS ST(0) 


D9h 


FDECSTP 


D9h 


FDIV ST(0), ST(i) (single precision) 


D8h 


FDIV ST(0), ST(i) (double precision) 


D8h 


FDIV ST(0), ST(i) (extented precision) 


D8h 


FDIV ST(i), ST(0) (single precision) 


DCh 



Note: 




* The last three bits of the modR/M byte select the stack entry ST(i). 




short 

short 

short 

short 

short 

short 

short 

short 



RISC86® 

Opcodes 

float 

float 

float 

fload, float 
float 

fload, float 
float 



float 

float 

fload, float 
fload, float 
float 

fload, float 

fload, float 

float 

float 

float 

float 

float 

float 

float 
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Table 13. Floating-Point Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


FDIV ST(i), ST(0) (double precision) 


DCh 


FDIV ST(i), ST(0) (extended precision) 


DCh 


FDIV ST(0), mem32real 


D8h 


FDIV ST(0), mem64real 


DCh 


FDIVP ST(0), ST(i) 


DEh 


FDIVR ST(0), ST(i) 


D8h 


FD1VR ST(I), ST(0) 


DCh 


FDIVR ST(0), mem32real 


D8h 


FDIVR ST(0), mem64real 


DCh 


FDIVRP ST(i), ST(0) 


DEh 


FFREEST(I) 


DDh 


FIADD ST(0), mem32int 


DAh 


FIADD ST(0), meml6int 


DEh 


FICOM ST(0), mem32int 


DAh 


FICOM ST(0), meml6int 


DEh 


FICOMP ST(0), mem32int 


DAh 


FICOMP ST(0), meml6int 


DEh 


F1DIV ST(0), mem32int 


DAh 


F1DIV ST(0), meml6int 


DEh 


FIDIVR ST(0), mem32int 


DAh 


FIDIVR ST(0), memlGint 


DEh 


FILD meml6int 


DFh 


FILD mem32int 


DBh 


FILD mem64int 


DFh 


FIMUL ST(0), mem32int 


DAh 


FIMULST(O), meml6int 


DEh 


FINCSTP 


D9h 


FINIT 


DBh 


FIST meml6int 


DFh 


FIST mem32int 


DBh 


FISTP meml6int 


DFh 




Modr/M 

Byte 



11-1 1 1-xxx 



11-111 -xxx 



mm-110-xxx 



mm-110-xxx 



11-11 1-xxx 



1 1-1 10-xxx 



11-11 1-xxx 



mm-11 1-xxx 



mm-11 1-xxx 



11-1 10-xxx 



11-000-xxx 



mm-000-xxx 



mm-000-xxx 



mm-0 10-xxx 



mm-010-xxx 



mm-01 1-xxx 



mm-01 1-xxx 



mm-1 10-xxx 



mm-1 10-xxx 



mm-11 1-xxx 



mm-11 1-xxx 



mm-OOO-xxx 



mm-OOO-xxx 



mm-1 01 -xxx 



mm-001-xxx 



mm-00 1-xxx 





mm-01 0-xxx 



mm-01 0-xxx 



mm-01 1-xxx 



RISC86* 

Opcodes 



float 



float 



fload, float 



fload, float 



float 



float 



float 



fload, float 



fload, float 



float 



float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



float 



fload, float 



fload, float 



fload, float 




The last three bits of the modR/M byte select the stack entry ST(i). 
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Table 13. Floating-Point Instructions (continued) 



Instruction Mnemonic 



FISTP mem32int 



FISTP mem64int 



FISUB ST(0), mem32int 



FISUBST(O), mem16int 



FISUBR ST(0), mem32int 



FISUBR ST(0), mem!6int 



FLD ST(i) 



FLD mem32real 



FLD mem64real 



FLD mem80real 




FLDLG2 



FLDLN2 



FMUL ST(0), ST(i) 



FMUL ST(i), ST(0) 



FMUL ST(0), mem32real 



FMUL ST(0), mem64real 



FMULP ST(0), ST(i) 



FNOP 



FPATAN 



DBh 



DFh 



DAh 



DEh 



DAh 



DEh 



D9h 



D9h 



DDh 



DBh 



D9h E8h 



D9h 



D9h 



D9h EAh 





FRNDINT 



FRSTOR 




D9h E9h 



D9h ECh 



D9h EDh 



D9h EBh 



D9h EEh 



D8h 



DCh 



D8h 



DCh 



DEh 



D9h DOh 



D9h F3h 



D9h F8h 



D9h F5h 



D9h F2h 



D9h FCh 



DDh 



RISC86* 

Opcodes 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



fload, float 



float 



float 



float 



float 



float 



float 



fload, float 



fload, float 



float 



float 






mm-100-xxx 




The last three bits of the modR/M byte select the stack entry ST(i). 
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Table 13. Floating-Point Instructions (continued) 



Instruction Mnemonic 


First 

Byte 


FSAVE 


DDh 


FSCALE 


D9h 


FSIN 


D9h 


FSINCOS 


D9h 


FSQRT (single precision) 


D9h 


FSQRT (double precision) 


D9h 


FSQRT (extended precision) 


D9h 


FST mem32real 


D9h 


FST mem64real 


DDh 


FSTST(i) 


DDh 


FSTCW 


D9h 


FSTENV 


D9h 


FSTP mem32real 


D9h 


FSTP mem64real 


DDh 


FSTP mem80real 


D9h 


FSTP ST(i) 


DDh 


FSTSWAX 


DFh 


FSTSW mem 16 


DDh 


FSUB ST(O), mem32real 


D8h 


FSUB ST(O), mem64real 


DCh 


FSUB ST(O), ST(i) 


D8h 


FSUB ST(i), ST(0) 


DCh 


FSUBP ST(O), ST(I) 


DEh 


FSUBR ST(O), mem32real 


D8h 


FSUBR ST(O), mem64real 


DCh 


FSUBR ST(O), ST(I) 


D8h 


FSUBR ST(i), ST(O) 


DCh 


FSUBRP ST(i), ST(0) 


DEh 


FTST 


D9h 


FUCOM 


DDh 


FUCOMP 


DDh 




Modr/M 

Byte 



mm-110-xxx 




mm-010-xxx 



mm-010-xxx 



11-OIOxxx 



mm-111-xxx 



mm-110-xxx 



mm-011-xxx 



mm-011-xxx 



mm-111-m 



11-011-xxx 



mm-1 1 1-xxx 



mm-100-xxx 



mm-1 00-xxx 



11-1 00-xxx 



11-101-xxx 



11-101-xxx 



mm-1 01 -xxx 



mm-1 01 -xxx 



11-1 00-xxx 



11-101-xxx 



11-1 00-xxx 



11-1 00-xxx 



11-101-xxx 




The last three bits of the modR/M byte select the stack entry ST(i). 
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Table 13. Floating-Point Instructions (continued) 



Instruction Mnemonic 



FUCOMPP 




DAh E9h 



D9h E5h 



Modr/M 

Byte 



RISC86® 

Opcodes 



short float 



short float 



11 -001 -xxx I short float 




The last three bits of the modR/M byte select the stack entry ST(i). 




Table 14. MMX™ Instructions 



Instruction Mnemonic 



EMMS 



MOVD mmreg, mreg32 



MOVD mmreg, mem32 



MOVD mreg32, mmreg 



MOVD mem32, mmreg 



MOVQ mmregl, mmreg2 



MOVQ mmreg, mem64 



MOVQ mmregl, mmreg2 



MOVQ mem64, mmreg 



PACKSSDW mmregl, mmreg2 



PACKSSDW mmreg, mem64 



PACKSSWB mmregl, mmreg2 



PACKSSWB mmreg, mem64 



PACKUSWB mmregl, mmreg2 



PACKUSWB mmreg, mem64 



PADDB mmregl, mmreg2 



PADDB mmreg, mem64 



PADDD mmregl, mmreg2 



modR/M 

Byte 



First 

Byte 



OFh 77h 



OFh 6Eh 



OFh 6Eh 



OFh 7Eh 



OFh 7Eh 



OFh 6Fh 



OFh 6Fh 



OFh 7Fh 



OFh 7Fh 



OFh 6Bh 



OFh 6Bh 



OFh 63h 11-xxx-xxx 



OFh 64h 



OFh 67h 



OFh 67h 



OFh FCh 



OFh FCh 



OFh FEh 




11-xxx-xxx 



mm-xxx-xxx 



mm-xxx-xxx 



11-xxx-xxx 



mm-xxx-xxx 



11-xxx-xxx 



mm-xxx-xxx 



11-xxx-xxx 



Bits 2, 7, and 0 of the modR/M byte select the integer register. 
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Table 14. MMX™ Instructions (continued) 



Instruction Mnemonic 



PADDD mmreg, mem64 



PADDSB mmregl, mmreg2 



PADDSB mmreg, mem64 



PADDSW mmregl, mmreg2 



PADDSW mmreg, mem64 



PADDUSB mmregl, mmreg2 



PADDUSB mmreg, mem64 



PADDUSW mmregl, mmreg2 



PADDUSW mmreg, mem64 



PADDW mmregl, mmreg2 



PADDW mmreg, mem64 



PAND mmregl, mmreg2 



PAND mmreg, mem64 



PANDN mmregl, mmreg2 



PANDN mmreg, mem64 



PCMPEQB mmregl, mmreg2 



PCMPEQB mmreg, mem64 



PCMPEQD mmregl, mmreg2 



PCMPEQD mmreg, mem64 



PCMPEQW mmregl, mmreg2 



PCMPEQW mmreg, mem64 



PCMPGTB mmregl, mmreg2 



PCMPGTB mmreg, mem64 



PCMPGTD mmregl, mmreg2 



PCMPGTD mmreg, mem64 



PCMPGTW mmregl, mmreg2 



PCMPGTW mmreg, mem64 



PMADDWD mmregl, mmreg2 



PMADDWD mmreg, mem64 



PMULHW mmregl, mmreg2 



PMULHW mmreg, mem64 



Note: 

* Bits 2, 1, and 0 of the modR/M byte select the integer register. 



First 

Byte 


modR/M 

Byte 


FEh 


mm-xxx-xxx 


ECh 


1 1-xxx-xxx 


ECh 


mm-xxx-xxx 


EDh 


1 1-xxx-xxx 


EDh 


mm-xxx-xxx 


DCh 


1 1-xxx-xxx 


DCh 


mm-xxx-xxx 


DDh 


1 1-xxx-xxx 


DDh 


mm-xxx-xxx 


FDh 


1 1 -xxx-xxx 


FDh 


mm-xxx-xxx 


DBh 


11 -xxx-xxx 


DBh 


mm-xxx-xxx 


DFh 


11 -xxx-xxx 


DFh 


mm-xxx-xxx 


74h 


11 -xxx-xxx 


74h 


mm-xxx-xxx 


76h 


11 -xxx-xxx 


76h 


mm-xxx-xxx 


75h 


11 -xxx-xxx 


75h 


mm-xxx-xxx 


64h 


1 1 -xxx-xxx 


64h 


mm-xxx-xxx 


66h 


11 -xxx-xxx 


66h 


mm-xxx-xxx 


65h 


11 -xxx-xxx 


65h 


mm-xxx-xxx 


F5h 


11 -xxx-xxx 


F5h 


mm-xxx-xxx 


E5h 


11 -xxx-xxx 


E5h 


mm-xxx-xxx 




RISC86* 

Opcodes 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 
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Table 14. MMX™ Instructions (continued) 



Instruction Mnemonic 


Prefix 

Byte(s) 


First 

Byte 


modR/M 

Byte 


Decode 

Type 


RISC86* 

Opcodes 


Note 


PMULLW mmregl, mmreg2 


OFh 


D5h 


11-xxx-xxx 


short 


meu 




PMULLW mmreg, mem64 


OFh 


D5h 


mm-xxx-xxx 


short 


mload, meu 




POR mmregl, mmreg2 


OFh 


EBh 


11-xxx-xxx 


short 


meu 




POR mmreg, mem64 


OFh 


EBh 


mm-xxx-xxx 


short 


mload, meu 




PSLLW mmregl, mmreg2 


OFh 


Flh 


11-xxx-xxx 


short 


meu 




PSLLW mmreg, mem64 


OFh 


Flh 


11-xxx-xxx 


short 


mload, meu 




PSLLW mmreg, imm8 


OFh 


71h 


11-110-xxx 


short 


meu 




PSLLD mmregl, mmreg2 


OFh 


F2h 


11-xxx-xxx 


short 


meu 




PSLLD mmreg, mem64 


OFh 


F2h 


11-xxx-xxx 


short 


meu 




PSLLD mmreg, imm8 


OFh 


72h 


11-110-xxx 


short 


meu 




PSLLQ mmregl, mmreg2 


OFh 


F3h 


11-xxx-xxx 


short 


meu 




PSLLQ mmreg, mem64 


OFh 


F3h 


11-xxx-xxx 


short 


meu 




PSLLQ mmreg, imm8 


OFh 


73h 


11-110-xxx 


short 


meu 




PSRAW mmregl, mmreg2 


OFh 


Elh 


11-xxx-xxx 


short 


meu 




PSRAW mmreg, mem64 


OFh 


Elh 


11-xxx-xxx 


short 


meu 




PSRAW mmreg, imm8 


OFh 


71 h 


11-100-xxx 


short 


meu 




PSRAD mmregl, mmreg2 


OFh 


E2h 


11-xxx-xxx 


short 


meu 




PSRAD mmreg, mem64 


OFh 


E2h 


1 1 -xxx-xxx 


short 


meu 




PSRAD mmreg, imm8 


OFh 


72h 


11-100-xxx 


short 


meu 




PSRAQ mmregl, mmreg2 


OFh 


E3h 


11-xxx-xxx 


short 


meu 




PSRAQ mmreg, mem64 


OFh 


E3h 


11-xxx-xxx 


short 


meu 




PSRAQ mmreg, imm8 


OFh 


73h 


11-100-xxx 


short 


meu 




PSRLW mmregl, mmreg2 


OFh 


Dlh 


11-xxx-xxx 


short 


meu 




PSRLW mmreg, mem64 


OFh 


Dlh 


11-xxx-xxx 


short 


meu 




PSRLW mmreg, imm8 


OFh 


71 h 


11-010-xxx 


short 


meu 




PSRLD mmregl, mmreg2 


OFh 


D2h 


1 1 -xxx-xxx 


short 


meu 




PSRLD mmreg, mem64 


OFh 


D2h 


11-xxx-xxx 


short 


meu 




PSRLD mmreg, imm8 


OFh 


72h 


11-010-xxx 


short 


meu 




PSRLQ mmregl, mmreg2 


OFh 


D3h 


11-xxx-xxx 


short 


meu 




PSRLQ mmreg, mem64 


OFh 


D3h 


11-xxx-xxx 


short 


meu 




PSRLQ mmreg, imm8 


OFh 


73h 


11-010-xxx 


short 


meu 





Note: 



* Bits 2, /, end 0 of the modR/M byte select the integer register. 
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Table 14. MMX™ Instructions (continued) 



Instruction Mnemonic 


Prefix 

Byte(s) 


First 

Byte 


modR/M 

Byte 


PSUBB mmregl, mmreg2 


OFh 


F8h 


1 1 -xxx-xxx 


PSUBB mmreg, mem64 


OFh 


F8h 


mm-xxx-xxx 


PSUBD mmregl, mmreg2 


OFh 


FAh 


11 -xxx-xxx 


PSUBD mmreg, mem64 


OFh 


FAh 


mm-xxx-xxx 


PSUBSB mmregl, mmreg2 


OFh 


E8h 


1 1 -xxx-xxx 


PSUBSB mmreg, mem64 


OFh 


E8h 


mm-xxx-xxx 


PSUBSW mmregl, mmreg2 


OFh 


E9h 


11 -xxx-xxx 


PSUBSW mmreg, mem64 


OFh 


E9h 


mm-xxx-xxx 


PSUBUSB mmregl, mmreg2 


OFh 


D8h 


11 -xxx-xxx 


PSUBUSB mmreg, mem64 


OFh 


D8h 


mm-xxx-xxx 


PSUBUSW mmregl, mmreg2 


OFh 


D9h 


11 -xxx-xxx 


PSUBUSW mmreg, mem64 


OFh 


D9h 


mm-xxx-xxx 


PSUBW mmregl, mmreg2 


OFh 


F9h 


11 -xxx-xxx 


PSUBW mmreg, mem64 


OFh 


F9h 


mm-xxx-xxx 


PUNPCKHBW mmregl, mmreg2 


OFh 


68h 


11 -xxx-xxx 


PUNPCKHBW mmreg, mem64 


OFh 


68h 


mm-xxx-xxx 


PUNPCKHWD mmregl, mmreg2 


OFh 


69h 


11 -xxx-xxx 


PUNPCKHWD mmreg, mem64 


OFh 


69h 


mm-xxx-xxx 


PUNPCKHDQ mmregl, mmreg2 


OFh 


6Ah 


11 -xxx-xxx 


PUNPCKHDQ mmreg, mem64 


OFh 


6Ah 


mm-xxx-xxx 


PUNPCKLBW mmregl, mmreg2 


OFh 


60h 


11 -xxx-xxx 


PUNPCKLBW mmreg, mem64 


OFh 


60h 


mm-xxx-xxx 


PUNPCKLWD mmregl, mmreg2 


OFh 


61 h 


11 -xxx-xxx 


PUNPCKLWD mmreg, mem64 


OFh 


61 h 


mm-xxx-xxx 


PUNPCKLDQ mmregl, mmreg2 


OFh 


62h 


11 -xxx-xxx 


PUNPCKLDQ mmreg, mem64 


OFh 


62h 


mm-xxx-xxx 


PXOR mmregl, mmreg2 


OFh 


EFh 


11 -xxx-xxx 


PXOR mmreg, mem64 


OFh 


EFh 


mm-xxx-xxx 




RISC86* 

Opcodes 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 



meu 



mload, meu 




Bits 2, 1, and 0 of the modR/M byte select the integer register. 
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4 Logic Symbol Diagram 
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5 Signal Descriptions 



5.1 A20M# (Address Bit 20 Mask) 

Input 

Summary A20M# is used to simulate the behavior of the 8086 when 

running in Real mode. The assertion of A20M# causes the 
processor to force bit 20 of the physical address to 0 prior to 
accessing the cache or driving out a memory bus cycle. The 
clearing of address bit 20 maps addresses that wrap above 1 
Mbyte to addresses below 1 Mbyte. 

Sampled The processor samples A20M# as a level-sensitive input on 

every clock edge. The system logic can drive the signal either 
synchronously or asynchronously. If it is asserted 
asynchronously, it must be asserted for a minimum pulse width 
of two clocks. 

The following list explains the effects of the processor sampling 
A20M# asserted under various conditions: 

■ Inquire cycles and writeback cycles are not affected by the 
state of A20M#. 

■ The assertion of A20M# in System Management Mode 
(SMM) is ignored. 

■ When A20M# is sampled asserted in Protected mode, it 
causes unpredictable processor operation. A20M# is only 
defined in Real mode. 

■ To ensure that A20M# is recognized before the first ADS# 
occurs following the negation of RESET, A20M# must be 
sampled asserted on the same clock edge that RESET is 
sampled negated or on one of the two subsequent clock 
edges. 

■ To ensure A20M# is recognized before the execution of an 
instruction, a serializing instruction must be executed 
between the instruction that asserts A20M# and the 
targeted instruction. 
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5.2 A[3 1 :3] (Address Bus) 

A[31:5] Bidirectional, A[4:3] Output 

Summary A[31:3] contain the physical address for the current bus cycle. 

The processor drives addresses on A[31:3] during memory and 
I/O cycles, and cycle definition information during special bus 
cycles. The processor samples addresses on A[31:5] during 
inquire cycles. 

Driven, Sampled, and As Outputs: A[31:3] are driven valid off the same clock edge as 

Floated ADS# and remain in the same state until the clock edge on 

which NA# or the last expected BRDY# of the cycle is sampled 
asserted. A[31:3] are driven during memory cycles, I/O cycles, 
special bus cycles, and interrupt acknowledge cycles. The 
processor continues to drive the address bus while the bus is 
idle. 

As Inputs: The processor samples A[31:5] during inquire cycles 
on the clock edge on which EADS# is sampled asserted. Even 
though A4 and A3 are not used during the inquire cycle, they 
must be driven to a valid state and must meet the same timings 
as A[31:5]. 

A[31:3] are floated off the clock edge that AHOLD or BOFF#is 
sampled asserted and off the clock edge that the processor 
asserts HLDA in recognition of HOLD. 

The processor resumes driving A[31:3] off the clock edge on 
which the processor samples AHOLD or BOFF# negated and off 
the clock edge on which the processor negates HLDA. 
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5.3 ADS# (Address Strobe) 

Output 

Summary The assertion of ADS# indicates the beginning of a new bus 

cycle. The address bus and all cycle definition signals 
corresponding to this bus cycle are driven valid off the same 
clock edge as ADS#. 

Driven and Floated ADS# is asserted for one clock at the beginning of each bus 
cycle. For non-pipelined cycles, ADS# can be asserted as early 
as the clock edge after the clock edge on which the last 
expected BRDY# of the cycle is sampled asserted, resulting in a 
single idle state between cycles. For pipelined cycles if the 
processor is prepared to start a new cycle, ADS# can be 
asserted as early as one clock edge after NA# is sampled 
asserted. 

If AHOLD is sampled asserted, ADS# is only driven in order to 
perform a writeback cycle due to an inquire cycle that hits a 
modified cache line. 

The processor floats ADS# off the clock edge that BOFF# is 
sampled asserted and off the clock edge that the processor 
asserts HLDA in recognition of HOLD. 

5.4 ADSC# (Address Strobe Copy) 

Output 

Summary ADSC# has the identical function and timing as ADS#. In the 

event ADS# becomes too heavily loaded due to a large fanout in 
a system, ADSC# can be used to split the load across two 
outputs, which improves timing. 
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5.5 

Summary 



Sampled 



AHOLD (Address Hold) 

Input 

AHOLD can be asserted by the system to initiate one or more 
inquire cycles. To allow the system to drive the address bus 
during an inquire cycle, the processor floats A[31:3] and AP off 
the clock edge on which AHOLD is sampled asserted. The data 
bus and all other control and status signals remain under the 
control of the processor and are not floated. This allows a bus 
cycle that is in progress when AHOLD is sampled asserted to 
continue to completion. The processor resumes driving the 
address bus off the clock edge on which AHOLD is sampled 
negated. 

If AHOLD is sampled asserted, ADS# is only asserted in order 
to perform a writeback cycle due to an inquire cycle that hits a 
modified cache line. 

The processor samples AHOLD on every clock edge. AHOLD is 
recognized while INIT and RESET are sampled asserted. 
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5.6 AP (Address Parity) 

Bidirectional 

Summary AP contains the even parity bit for cache line addresses driven 

and sampled on A[31:5]. Even parity means that the total 
number of 1 bits on AP and A[31:5] is even. (A4 and A3 are not 
used for the generation or checking of address parity because 
these bits are not required to address a cache line.) AP is driven 
by the processor during processor-initiated cycles and is 
sampled by the processor during inquire cycles. If AP does not 
reflect even parity during an inquire cycle, the processor 
asserts APCHK# to indicate an address bus parity check. The 
processor does not take an internal exception as the result of 
detecting an address bus parity check, and system logic must 
respond appropriately to the assertion of this signal. 

As an Output: The processor drives AP valid off the clock edge 
on which ADS# is asserted until the clock edge on which NA#or 
the last expected BRDY# of the cycle is sampled asserted. AP is 
driven during memory cycles, I/O cycles, special bus cycles, and 
interrupt acknowledge cycles. The processor continues to drive 
AP while the bus is idle. 

As an Input: The processor samples AP during inquire cycles on 
the clock edge on which EADS# is sampled asserted. 

The processor floats AP off the clock edge that AHOLD or 
BOFF# is sampled asserted and off the clock edge that the 
processor asserts HLDA in recognition of HOLD. 

The processor resumes driving AP off the clock edge on which 
the processor samples AHOLD or BOFF# negated and off the 
clock edge on which the processor negates HLDA. 



Driven, Sampled, and 
Floated 
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5.7 

Summary 

Driven 



APCHK# (Address Parity Check) 

Output 

If the processor detects an address parity error during an 
inquire cycle, APCHK# is asserted for one clock. The processor 
does not take an internal exception as the result of detecting an 
address bus parity check, and system logic must respond 
appropriately to the assertion of this signal. 

The processor ensures that APCHK# does not glitch, enabling 
the signal to be used as a clocking source for system logic. 

APCHK# is driven valid the clock edge after the clock edge on 
which the processor samples EADS# asserted. It is negated off 
the next clock edge. 

APCHK# is always driven except in Tri-State Test mode. 
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5.8 BE[7:0]# (Byte Enables) 



Summary 



Output 



BE[7:0]# are used by the processor to indicate the valid data 
bytes during a write cycle and the requested data bytes during 
a read cycle. The byte enables can be used to derive address 
bits A[2:0], which are not physically part of the processor’s 
address bus. The processor checks and generates valid data 
parity for the data bytes that are valid as defined by the byte 
enables. The eight byte enables correspond to the eight bytes of 
the data bus as follows: 



■ BE7#:D[63:56] 

■ BE6#:D[55:48] 

■ BE5#: D[47:40] 

■ BE4#: D[39:32] 



BE3#: D[31:24] 
BE2#:D[23:16] 
BE1#:D[15:8] 
BEO#: D[7:0] 



The processor expects data to be driven by the system logic on 
all eight bytes of the data bus during a burst cache-line read 
cycle, independent of the byte enables that are asserted. 

The byte enables are also used to distinguish between special 
bus cycles as defined in Table 21 on page 5-41. 

Driven and Floated BE[7:0]# are driven off the same clock edge as ADS# and 

remain in the same state until the clock edge on which NA# or 
the last expected BRDY# of the cycle is sampled asserted. 
BE[7:0]# are driven during memory cycles, I/O cycles, special 
bus cycles, and interrupt acknowledge cycles. 



The processor floats BE[7:0]# off the clock edge that BOFF# is 
sampled asserted and off the clock edge that the processor 
asserts HLDA in recognition of HOLD. Unlike the address bus, 
BE[7:0]# are not floated in response to AHOLD. 
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5.9 BF[2:0] (Bus Frequency) 

Inputs, Internal Pullups 

Summary BF[2:0] determine the internal operating frequency of the 

processor. The frequency of the CLK input signal is multiplied 
internally by a ratio determined by the state of these signals as 
defined in Table 15. BF[2:0] have weak internal pullups and 
default to the 3.5 multiplier if left unconnected. 



Table 15. Processor-to-Bus Clock Ratios 



State of BF[2:0] Inputs 


Processor-Clock to Bus-Clock Ratio 


100b 


2.5x 


101b 


3 .Ox 


110b 


2.0x 


mb 


3.5x 


ooob 


4.5x 


ooib 


5. Ox 


010b 


4.0x 


011b 


5.5x 



Sampled BF[2:0] are sampled during the falling transition of RESET. 

They must meet a minimum setup time of 1.0 ms and a 
minimum hold time of two clocks relative to the negation of 
RESET. 
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5.10 

Summary 



Sampled 



BOFF# (Backoff) 

Input 

If BOFF# is sampled asserted, the processor unconditionally 
aborts any cycles in progress and transitions to a bus hold state 
by floating the following signals: A[31:3], ADS#, ADSC#, AP, 
BE[7:0]#, CACHE#, D[63:0], D/C#, DP[7:0], LOCK#, M/IO#, 
PCD, PWT, SCYC, and W/R#. These signals remain floated until 
BOFF# is sampled negated. This allows an alternate bus master 
or the system to control the bus. 

When BOFF # is sampled negated, any processor cycle that was 
aborted due to the assertion of BOFF# is restarted from the 
beginning of the cycle, regardless of the number of transfers 
that were completed. If BOFF# is sampled asserted on the same 
clock edge as BRDY# of a bus cycle of any length, then BOFF# 
takes precedence over the BRDY#. In this case, the cycle is 
aborted and restarted after BOFF# is sampled negated. 

BOFF# is sampled on every clock edge. The processor floats its 
bus signals off the clock edge on which BOFF# is sampled 
asserted. These signals remain floated until the clock edge on 
which BOFF# is sampled negated. 

BOFF# is recognized while INIT and RESET are sampled 
asserted. 
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5.11 

Summary 

Sampled 



BRDY# (Burst Ready) 

Input, Internal Pullup 

BRDY# is asserted to the processor by system logic to indicate 
either that the data bus is being driven with valid data during a 
read cycle or that the data bus has been latched during a write 
cycle. If necessary, the system logic can insert bus cycle wait 
states by negating BRDY # until it is ready to continue the data 
transfer. BRDY# is also used to indicate the completion of 
special bus cycles. 

BRDY # is sampled every clock edge within a bus cycle starting 
with the clock edge after the clock edge that negates ADS#. 
BRDY # is ignored while the bus is idle. The processor samples 
the following inputs on the clock edge on which BRDY# is 
sampled asserted: D[63:0], DP[7:0], and KEN# during read 
cycles, EWBE# during write cycles, and WB/WT# during read 
and write cycles. (If Write Cacheability Detection is enabled, 
the processor samples KEN# during write cycles. See “Write 
Allocate” on page 8-7 for additional details.) If NA# is sampled 
asserted prior to BRDY#, then KEN# and WB/WT# are sampled 
on the clock edge on which NA# is sampled asserted. 

The number of times the processor expects to sample BRDY# 
asserted depends on the type of bus cycle, as follows: 

■ One time for a single-transfer cycle, a special bus cycle, or 
each of two cycles in an interrupt acknowledge sequence 

■ Four times for a burst cycle (once for each data transfer) 

BRDY# can be held asserted for four consecutive clocks 
throughout the four transfers of the burst, or it can be negated 
to insert wait states. 
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5.12 

Summary 

Sampled 



BRDYC# (Burst Ready Copy) 

Input, Internal Pullup 

BRDYC# has the identical function as BRDY#. In the event 
BRDY# becomes too heavily loaded due to a large fanout or 
loading in a system, BRDYC# can be used to reduce this 
loading, which improves timing. 

In addition, BRDYC# is sampled when RESET is negated to 
configure the drive strength of A[20:3], ADS#, HITM#, and 
W/R#. If BRDYC# is 0 during the falling transition of RESET, 
these particular outputs are configured using higher drive 
strengths than the standard strength. If BRDYC# is 1 during the 
falling transition of RESET, the standard strength is selected. 

BRDYC# is sampled every clock edge within a bus cycle 
starting with the clock edge after the clock edge that negates 
ADS#. 

BRDYC# is also sampled during the falling transition of 
RESET. If RESET is driven synchronously, BRDYC# must meet 
the specified hold time relative to the negation of RESET. If 
RESET is driven asynchronously, the minimum setup and hold 
time for BRDYC# relative to the negation of RESET is two 
clocks. 
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5. 1 3 BREQ (Bus Request) 

Output 

Summary BREQ is asserted by the processor to request the bus in order to 

complete an internally pending bus cycle. The system logic can 
use BREQ to arbitrate among the bus participants. If the 
processor does not own the bus, BREQ is asserted until the 
processor gains access to the bus in order to begin the pending 
cycle or until the processor no longer needs to run the pending 
cycle. If the processor currently owns the bus, BREQ is asserted 
with ADS#. The processor asserts BREQ for each assertion of 
ADS# but does not necessarily assert ADS# for each assertion 
of BREQ. 

Driven BREQ is asserted off the same clock edge on which ADS# is 

asserted. BREQ can also be asserted off any clock edge, 
independent of the assertion of ADS#. BREQ can be negated 
one clock edge after it is asserted. 

The processor always drives BREQ except in Tri-State Test 
mode. 

5. 1 4 CACHE# (Cacheable Access) 

Output 

Summary For reads, CACHE# is asserted to indicate the cacheability of 

the current bus cycle. In addition, if the processor samples 
KEN# asserted, which indicates the driven address is 
cacheable, the cycle is a 32-byte burst read cycle. For write 
cycles, CACHE# is asserted to indicate the current bus cycle is 
a modified cache-line writeback. KEN# is ignored during 
writebacks. If CACHE# is not asserted, or if KEN# is sampled 
negated during a read cycle, the cycle is not cacheable and 
defaults to a single-transfer cycle. 

Driven and Floated CACHE# is driven off the same clock edge as ADS# and 

remains in the same state until the clock edge on which NA# or 
the last expected BRDY# of the cycle is sampled asserted. 

CACHE# is floated off the clock edge that BOFF# is sampled 
asserted and off the clock edge that the processor asserts 
HLDA in recognition of HOLD. 
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5.15 CLK (Clock) 

Input 

Summary The CLK signal is the bus clock for the processor and is the 

reference for all signal timings under normal operation (except 
for TDI, TDO, TMS, and TRST#). BF[2:0] determine the internal 
frequency multiplier applied to CLK to obtain the processor’s 
core operating frequency. (See “BF[2:0] (Bus Frequency)” on 
page 5-8 for a list of the processor-to-bus clock ratios.) 

Sampled The CLK signal must be stable a minimum of 1.0 ms prior to the 

negation of RESET to ensure the proper operation of the 
processor. See “CLK Switching Characteristics” on page 16-1 
for details regarding the CLK specifications. 

5.16 D/C# (Data/Code) 

Output 

Summary The processor drives D/C# during a memory bus cycle to 

indicate whether it is addressing data or executable code. D/C# 
is also used to define other bus cycles, including interrupt 
acknowledge and special cycles. (See Table 21 on page 5-41 for 
more details.) 

Driven and Floated D/C# is driven off the same clock edge as ADS# and remains in 
the same state until the clock edge on which NA# or the last 
expected BRDY# of the cycle is sampled asserted. D/C# is 
driven during memory cycles, I/O cycles, special bus cycles, and 
interrupt acknowledge cycles. 

D/C# is floated off the clock edge that BOFF# is sampled 
asserted and off the clock edge that the processor asserts 
HLDA in recognition of HOLD. 
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5.17 D[63:0] (Data Bus) 

Bidirectional 

Summary D[63:0] represent the processor’s 64-bit data bus. Each of the 

eight bytes of data that comprise this bus is qualified as valid 
by its corresponding byte enable. (See “BE[7:0]# (Byte 
Enables)” on page 5-7.) 

Driven, Sampled, and As Outputs: For single-transfer write cycles, the processor 

Floated drives D[63:0] with valid data one clock edge after the clock 

edge on which ADS# is asserted and D[63:0] remain in the same 
state until the clock edge on which BRDY#is sampled asserted. 
If the cycle is a writeback — in which case four, 8-byte transfers 
occur — D[63:0] are driven one clock edge after the clock edge 
on which ADS# is asserted and are subsequently changed off 
the clock edge on which each BRDY# assertion of the burst 
cycle is sampled. 

If the assertion of ADS# represents a pipelined write cycle that 
follows a read cycle, the processor does not drive D[63:0] until 
it is certain that contention on the data bus will not occur. In 
this case, D[63:0] are driven the clock edge after the last 
expected BRDY# of the previous cycle is sampled asserted. 

As Inputs: During read cycles, the processor samples D[63:0] on 
the clock edge on which BRDY # is sampled asserted. 

The processor always floats D[63:0] except when they are 
being driven during a write cycle as described above. In 
addition, D[63:0] are floated off the clock edge that BOFF# is 
sampled asserted and off the clock edge that the processor 
asserts HLDA in recognition of HOLD. 
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5.18 DP[7:0] (Data Parity) 

Bidirectional 

Summary DP[7:0] are even parity bits for each valid byte of data — as 

defined by BE[7:0]# — driven and sampled on the D[63:0] data 
bus. (Even parity means that the total number of 1 bits within 
each byte of data and its respective data parity bit is even.) 
DP[7:0] are driven by the processor during write cycles and 
sampled by the processor during read cycles. If the processor 
detects bad parity on any valid byte of data during a read cycle, 
PCHK#is asserted for one clock beginning the clock edge after 
BRDY#is sampled asserted. The processor does not take an 
internal exception as the result of detecting a data parity 
check, and system logic must respond appropriately to the 
assertion of this signal. 

The eight data parity bits correspond to the eight bytes of the 
data bus as follows: 

■ DP7: D[63:56] ■ DP3: D[31:24] 

■ DP6: D[55:48] ■ DP2: D[23:16] 

■ DP5: D[47:40] ■ DPI: D[15:8] 

■ DP4: D[39:32] ■ DPO: D[7:0] 

For systems that do not support data parity, DP[7:0] should be 
connected to V C C 3 through pullup resistors. 

As Outputs: For single-transfer write cycles, the processor 
drives DP [7:0] with valid parity one clock edge after the clock 
edge on which ADS# is asserted and DP[7:0] remain in the same 
state until the clock edge on which BRDY# is sampled asserted. 
If the cycle is a writeback, DP[7:0] are driven one clock edge 
after the clock edge on which ADS# is asserted and are 
subsequently changed off the clock edge on which each BRDY# 
assertion of the burst cycle is sampled. 

As Inputs: During read cycles, the processor samples DP[7:0] on 
the clock edge BRDY# is sampled asserted. 

The processor always floats DP[7:0] except when they are 
being driven during a write cycle as described above. In 
addition, DP[7:0] are floated off the clock edge that BOFF# is 
sampled asserted and off the clock edge that the processor 
asserts HLDA in recognition of HOLD. 



Driven, Sampled, and 
Floated 
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5.19 

Summary 

Sampled 



EADS# (External Address Strobe) 

Input 

System logic asserts EADS# during a cache inquire cycle to 
indicate that the address bus contains a valid address. EADS# 
can only be driven after the system logic has taken control of 
the address bus by asserting AHOLD or BOFF# or by receiving 
HLDA. The processor responds to the sampling of EADS# and 
the address bus by driving HIT #, which indicates if the inquired 
cache line exists in the processor’s cache, and HITM#, which 
indicates if it is in the modified state. 

If AHOLD or BOFF# is asserted by the system logic in order to 
execute a cache inquire cycle, the processor begins sampling 
EADS# two clock edges after AHOLD or BOFF# is sampled 
asserted. If the system logic asserts HOLD in order to execute a 
cache inquire cycle, the processor begins sampling EADS# two 
clock edges after the clock edge HLDA is asserted by the 
processor. 

EADS# is ignored during the following conditions: 

■ One clock edge after the clock edge on which EADS# is 
sampled asserted 

■ Two clock edges after the clock edge on which ADS# is 
asserted 

■ When the processor is driving the address bus 

■ When the processor asserts HITM# 
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5.20 

Summary 



Sampled 



EWBE# (External Write Buffer Empty) 

Input 

The system logic can negate EWBE# to the processor to 
indicate that its external write buffers are full and that 
additional data cannot be stored at this time. This causes the 
processor to delay the following activities until EWBE# is 
sampled asserted: 

■ The commitment of write hit cycles to cache lines in the 
modified state or exclusive state in the processor’s cache 

■ The decode and execution of an instruction that follows a 
currently-executing serializing instruction 

■ The assertion or negation of SMIACT# 

■ The entering of the Halt state and the Stop Grant state 

Negating EWBE# does not prevent the completion of any type 
of cycle that is currently in progress. 

The processor samples EWBE# on each clock edge that BRDY# 
is sampled asserted during all memory write cycles (except 
writeback cycles), I/O write cycles, and special bus cycles. 

If EWBE# is sampled negated, it is sampled on every clock edge 
until it is asserted, and then it is ignored until BRDY# is 
sampled asserted in the next write cycle or special cycle. 
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5.21 

Summary 

Driven 



FERR# (Floating-Point Error) 

Output 

The assertion of FERR# indicates the occurrence of an 
unmasked floating-point exception resulting from the 
execution of a floating-point instruction. This signal is provided 
to allow the system logic to handle this exception in a manner 
consistent with IBM-compatible PC/AT systems. See “Handling 
Floating-Point Exceptions” on page 9-1 for a system logic 
implementation that supports floating-point exceptions. 

The state of the numeric error (NE) bit in CRO does not affect 
the FERR# signal. 

The processor ensures that FERR# does not glitch, enabling the 
signal to be used as a clocking source for system logic. 

The processor asserts FERR# on the instruction boundary of 
the next floating-point instruction, MMX instruction, or WAIT 
instruction that occurs following the floating-point instruction 
that caused the unmasked floating-point exception — that is, 
FERR# is not asserted at the time the exception occurs. The 
IGNNE# signal does not affect the assertion of FERR#. 

FERR# is negated during the following conditions: 

■ Following the successful execution of the floating-point 
instructions FCLEX, FINIT, FSAVE, and FSTENV 

■ Under certain circumstances, following the successful 
execution of the floating-point instructions FLDCW, 
FLDENV, and FRSTOR, which load the floating-point status 
word or the floating-point control word 

■ Following the falling transition of RESET 

FERR# is always driven except in Tri-State Test mode. 

See “IGNNE# (Ignore Numeric Exception)” on page 5-22 for 
more details on floating-point exceptions. 
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5.22 

Summary 

Sampled 



FLUSH# (Cache Flush) 

Input 

In response to sampling FLUSH# asserted, the processor writes 
back any data cache lines that are in the modified state, 
invalidates all lines in the instruction and data caches, and then 
executes a flush acknowledge special cycle. (See Table 21 on 
page 5-41 for the bus definition of special cycles.) 

In addition, FLUSH# is sampled when RESET is negated to 
determine if the processor enters Tri-State Test mode. If 
FLUSH# is 0 during the falling transition of RESET, the 
processor enters Tri-State Test mode instead of performing the 
normal RESET functions. 

FLUSH# is sampled and latched as a falling edge-sensitive 
signal. During normal operation (not RESET), FLUSH# is 
sampled on every clock edge but is not recognized until the 
next instruction boundary. If FLUSH# is asserted 
synchronously, it can be asserted for a minimum of one clock. If 
FLUSH# is asserted asynchronously, it must have been negated 
for a minimum of two clocks, followed by an assertion of a 
minimum of two clocks. 

FLUSH# is also sampled during the falling transition of 
RESET. If RESET and FLUSH# are driven synchronously, 
FLUSH# is sampled on the clock edge prior to the clock edge on 
which RESET is sampled negated. If RESET is driven 
asynchronously, the minimum setup and hold time for 
FLUSH#, relative to the negation of RESET, is two clocks. 
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5.23 

Summary 

Driven 

5.24 

Summary 

Driven 



HIT# (Inquire Cycle Hit) 

Output 

The processor asserts HIT# during an inquire cycle to indicate 
that the cache line is valid within the processor’s instruction or 
data cache (also known as a cache hit). The cache line can be in 
the modified, exclusive, or shared state. 

HIT# is always driven — except in Tri-State Test mode — and 
only changes state the clock edge after the clock edge on which 
EADS# is sampled asserted. It is driven in the same state until 
the next inquire cycle. 

HITM# (Inquire Cycle Hit To Modified Line) 

Output 

The processor asserts HITM# during an inquire cycle to 
indicate that the cache line exists in the processor’s data cache 
in the modified state. The processor performs a writeback cycle 
as a result of this cache hit. If an inquire cycle hits a cache line 
that is currently being written back, the processor asserts 
HITM# but does not execute another writeback cycle. The 
system logic must not expect the processor to assert ADS# each 
time HITM# is asserted. 

HITM# is always driven — except in Tri-State Test mode — and, 
in particular, is driven to represent the result of an inquire 
cycle the clock edge after the clock edge on which EADS# is 
sampled asserted. If HITM# is negated in response to the 
inquire address, it remains negated until the next inquire cycle. 
If HITM# is asserted in response to the inquire address, it 
remains asserted throughout the writeback cycle and is 
negated one clock edge after the last BRDY # of the writeback is 
sampled asserted. 
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5.25 

Summary 



Driven 



5.26 

Summary 

Sampled 



HLDA (Hold Acknowledge) 

Output 

When HOLD is sampled asserted, the processor completes the 
current bus cycles, floats the processor bus, and asserts HLDA 
in an acknowledgment that these events have been completed. 
The processor does not assert HLDA until the completion of a 
locked sequence of cycles. While HLDA is asserted, another bus 
master can drive cycles on the bus, including inquire cycles to 
the processor. The following signals are floated when HLDA is 
asserted: A[31:3], ADS#, ADSC#, AP, BE[7:0]#, CACHE#, 
D[63:0], D/C#, DP[7:0], LOCK#, M/IO#, PCD, PWT, SCYC, and 
W/R#. 

The processor ensures that HLDA does not glitch. 

HLDA is always driven except in Tri-State Test mode. If a 
processor cycle is in progress while HOLD is sampled asserted, 
HLDA is asserted one clock edge after the last BRDY# of the 
cycle is sampled asserted. If the bus is idle, HLDA is asserted 
one clock edge after HOLD is sampled asserted. HLDA is 
negated one clock edge after the clock edge on which HOLD is 
sampled negated. 

The assertion of HLDA is independent of the sampled state of 
BOFF#. 

The processor floats the bus every clock in which HLDA is 
asserted. 

HOLD (Bus Hold Request) 

Input 

The system logic can assert HOLD to gain control of the 
processor’s bus. When HOLD is sampled asserted, the processor 
completes the current bus cycles, floats the processor bus, and 
asserts HLDA in an acknowledgment that these events have 
been completed. 

The processor samples HOLD on every clock edge. If a 
processor cycle is in progress while HOLD is sampled asserted, 
HLDA is asserted one clock edge after the last BRDY# of the 
cycle is sampled asserted. If the bus is idle, HLDA is asserted 
one clock edge after HOLD is sampled asserted. HOLD is 
recognized while INIT and RESET are sampled asserted. 
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5.27 IGNNE# (Ignore Numeric Exception) 

Input 

Summary IGNNE#, in conjunction with the numeric error (NE) bit in 

CRO, is used by the system logic to control the effect of an 
unmasked floating-point exception on a previous floating-point 
instruction during the execution of a floating-point instruction, 
MMX instruction, or the WAIT instruction — hereafter referred 
to as the target instruction. 

If an unmasked floating-point exception is pending and the 
target instruction is considered error-sensitive, then the 
relationship between NE and IGNNE# is as follows: 

■ If NE = 0, then: 

• If IGNNE# is sampled asserted, the processor ignores the 
floating-point exception and continues with the 
execution of the target instruction. 

• If IGNNE# is sampled negated, the processor waits until 
it samples IGNNE#, INTR, SMI#, NMI, or INIT asserted. 

If IGNNE# is sampled asserted while waiting, the 
processor ignores the floating-point exception and 
continues with the execution of the target instruction. 

If INTR, SMI#, NMI, or INIT is sampled asserted while 
waiting, the processor handles its assertion 
appropriately. 

■ If NE = 1, the processor invokes the INT lOh exception 
handler. 

If an unmasked floating-point exception is pending and the 
target instruction is considered error-insensitive, then the 
processor ignores the floating-point exception and continues 
with the execution of the target instruction. 

FERR# is not affected by the state of the NE bit or IGNNE#. 
FERR# is always asserted at the instruction boundary of the 
target instruction that follows the floating-point instruction 
that caused the unmasked floating-point exception. 

This signal is provided to allow the system logic to handle 
exceptions in a manner consistent with IBM-compatible PC/AT 
systems. 
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The processor samples IGNNE# as a level-sensitive input on 
every clock edge. The system logic can drive the signal either 
synchronously or asynchronously. If it is asserted 
asynchronously, it must be asserted for a minimum pulse width 
of two clocks. 

(Initialization) 

Input 

The assertion of INIT causes the processor to empty its 
pipelines, to initialize most of its internal state, and to branch 
to address FFFF_FFFOh — the same instruction execution 
starting point used after RESET. Unlike RESET, the processor 
preserves the contents of its caches, the floating-point state, the 
MMX state, Model-Specific Registers, the CD and NW bits of 
the CRO register, and other specific internal resources. 

INIT can be used as an accelerator for 80286 code that requires 
a reset to exit from Protected mode back to Real mode. 

INIT is sampled and latched as a rising edge-sensitive signal. 
INIT is sampled on every clock edge but is not recognized until 
the next instruction boundary. During an I/O write cycle, it 
must be sampled asserted a minimum of three clock edges 
before BRDY# is sampled asserted if it is to be recognized on 
the boundary between the I/O write instruction and the 
following instruction. 

If INIT is asserted synchronously, it can be asserted for a 
minimum of one clock. If it is asserted asynchronously, it must 
have been negated for a minimum of two clocks, followed by an 
assertion of a minimum of two clocks. 
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5.29 

Summary 

Sampled 

5.30 

Summary 

Sampled 



INTR (Maskable Interrupt) 

Input 

INTR is the system’s maskable interrupt input to the processor. 
When the processor samples and recognizes INTR asserted, the 
processor executes a pair of interrupt acknowledge bus cycles 
and then jumps to the interrupt service routine specified by the 
interrupt number that was returned during the interrupt 
acknowledge sequence. The processor only recognizes INTR if 
the interrupt flag (IF) in the EFLAGS register equals 1. 

The processor samples INTR as a level-sensitive input on every 
clock edge, but the interrupt request is not recognized until the 
next instruction boundary. The system logic can drive INTR 
either synchronously or asynchronously. If it is asserted 
asynchronously, it must be asserted for a minimum pulse width 
of two clocks. In order to be recognized, INTR must remain 
asserted until an interrupt acknowledge sequence is complete. 

INV (Invalidation Request) 

Input 

During an inquire cycle, the state of INV determines whether 
an addressed cache line that is found in the processor’s 
instruction or data cache transitions to the invalid state or the 
shared state. 

If INV is sampled asserted during an inquire cycle, the 
processor transitions the cache line (if found) to the invalid 
state, regardless of its previous state. If INV is sampled negated 
during an inquire cycle, the processor transitions the cache line 
(if found) to the shared state. In either case, if the cache line is 
found in the modified state, the processor writes it back to 
memory before changing its state. 

INV is sampled on the clock edge on which EADS# is sampled 
asserted. 
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5.31 

Summary 



Sampled 



KEN# (Cache Enable) 

Input 

If KEN# is sampled asserted, it indicates that the address 
presented by the processor is cacheable. If KEN# is sampled 
asserted and the processor intends to perform a cache-line fill 
(signified by the assertion of CACHE#), the processor executes 
a 32-byte burst read cycle and expects to sample BRDY# 
asserted a total of four times. If KEN# is sampled negated 
during a read cycle, a single-transfer cycle is executed and the 
processor does not cache the data. For write cycles, CACHE# is 
asserted to indicate the current bus cycle is a modified 
cache-line writeback. KEN# is ignored during writebacks. 

If Write Cacheability Detection is enabled, the processor 
samples KEN # during write cycles to determine if the address 
of the write cycle is cacheable. Write Cacheability Detection is 
one of four conditions that enable the processor to perform 
write allocation. See “Write Allocate” on page 8-7 for 
additional details. 

If PCD is asserted during a bus cycle, the processor does not 
cache any data read during that cycle, regardless of the state of 
KEN#. (See “PCD (Page Cache Disable)” on page 5-29 for more 
details.) 

If the processor has sampled the state of KEN# during a cycle, 
and that cycle is aborted due to the sampling of BOFF# 
asserted, the system logic must ensure that KEN# is sampled in 
the same state when the processor restarts the aborted cycle. 

KEN# is sampled on the clock edge on which the first BRDY# or 
NA# of a read cycle is sampled asserted. If the read cycle is a 
burst, KEN# is ignored during the last three assertions of 
BRDY#. KEN# is sampled during read cycles only when 
CACHE# is asserted. 

If Write Cacheability Detection is enabled, KEN# is sampled on 
the clock edge on which the first BRDY # or NA# of a write cycle 
is sampled asserted. 
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5.32 LOCK# (Bus Lock) 

Output 

Summary The processor asserts LOCK# during a sequence of bus cycles to 

ensure that the cycles are completed without allowing other 
bus masters to intervene. Locked operations consist of two to 
five bus cycles. LOCK# is asserted during the following 
operations: 

■ An interrupt acknowledge sequence 

■ Descriptor Table accesses 

■ Page Directory and Page Table accesses 

■ XCHG instruction 

■ An instruction with an allowable LOCK prefix 

In order to ensure that locked operations appear on the bus and 
are visible to the entire system, any data operands addressed 
during a locked cycle that reside in the processor’s cache are 
flushed and invalidated from the cache prior to the locked 
operation. If the cache line is in the modified state, it is written 
back and invalidated prior to the locked operation. Likewise, 
any data read during a locked operation is not cached. 

The processor ensures that LOCK# does not glitch. 

Driven and Floated During a locked cycle, LOCK# is asserted off the same clock 
edge on which ADS# is asserted and remains asserted until the 
last BRDY# of the last bus cycle is sampled asserted. The 
processor negates LOCK# for at least one clock between 
consecutive sequences of locked operations to allow the system 
logic to arbitrate for the bus. 

LOCK# is floated off the clock edge that BOFF# is sampled 
asserted and off the clock edge that the processor asserts 
HLDA in response to HOLD. When LOCK# is floated due to 
BOFF# sampled asserted, the system logic is responsible for 
preserving the lock condition while LOCK# is in the 
high-impedance state. 
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5.33 M/IO# (Memory or I/O) 

Output 

Summary The processor drives M/IO# during a bus cycle to indicate 

whether it is addressing the memory or I/O space. If M/IO# = 1, 
the processor is addressing memory or a memory-mapped I/O 
port as the result of an instruction fetch or an instruction that 
loads or stores data. If M/IO# = 0, the processor is addressing an 
I/O port during the execution of an I/O instruction. In addition, 
M/IO# is used to define other bus cycles, including interrupt 
acknowledge and special cycles. (See Table 21 on page 5-41 for 
more details.) 

Driven and Floated M/IO# is driven off the same clock edge as ADS# and remains in 
the same state until the clock edge on which NA# or the last 
expected BRDY# of the cycle is sampled asserted. M/IO# is 
driven during memory cycles, I/O cycles, special bus cycles, and 
interrupt acknowledge cycles. 

M/IO# is floated off the clock edge that BOFF# is sampled 
asserted and off the clock edge that the processor asserts 
HLDA in response to HOLD. 
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5.34 

Summary 

Sampled 

5.35 

Summary 

Sampled 



NA# (Next Address) 

Input 

System logic asserts NA# to indicate to the processor that it is 
ready to accept another bus cycle pipelined into the previous 
bus cycle. ADS#, along with address and status signals, can be 
asserted as early as one clock edge after NA# is sampled 
asserted if the processor is prepared to start a new cycle. 
Because the processor allows a maximum of two cycles to be in 
progress at a time, the assertion of NA# is sampled while two 
cycles are in progress but ADS# is not asserted until the 
completion of the first cycle. 

NA# is sampled every clock edge during bus cycles, starting one 
clock edge after the clock edge that negates ADS#, until the 
last expected BRDY# of the last executed cycle is sampled 
asserted (with the exception of the clock edge after the clock 
edge that negates the ADS# for a second pending cycle). 
Because the processor latches NA# when sampled, the system 
logic only needs to assert NA# for one clock. 

NMI (Non-Maskable Interrupt) 

Input 

When NMI is sampled asserted, the processor jumps to the 
interrupt service routine defined by interrupt number 02h. 
Unlike the INTR signal, software cannot mask the effect of NMI 
if it is sampled asserted by the processor. However, NMI is 
temporarily masked upon entering System Management Mode 
(SMM). In addition, an interrupt acknowledge cycle is not 
executed because the interrupt number is predefined. 

If NMI is sampled asserted while the processor is executing the 
interrupt service routine for a previous NMI, the subsequent 
NMI remains pending until the completion of the execution of 
the IRET instruction at the end of the interrupt service routine. 

NMI is sampled and latched as a rising edge-sensitive signal. 
During normal operation, NMI is sampled on every clock edge 
but is not recognized until the next instruction boundary. If it is 
asserted synchronously, it can be asserted for a minimum of 
one clock. If it is asserted asynchronously, it must have been 
negated for a minimum of two clocks, followed by an assertion 
of a minimum of two clocks. 
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5.36 PCD (Page Cache Disable) 

Output 

Summary The processor drives PCD to indicate the operating system’s 

specification of cacheability for the page being addressed. 
System logic can use PCD to control external caching. If PCD is 
asserted, the addressed page is not cached. If PCD is negated, 
the cacheability of the addressed page depends upon the state 
of CACHE# and KEN#. 

The state of PCD depends upon the processor’s operating mode 
and the state of certain bits in its control registers and TLB as 
follows: 

■ In Real mode, or in Protected and Virtual-8086 modes while 
paging is disabled (PG bit in CRO set to 0): 

PCD output = CD bit in CRO 

a In Protected and Virtual-8086 modes while caching is 
enabled (CD bit in CRO set to 0) and paging is enabled (PG 
bit in CRO set to 1): 

• For accesses to I/O space, page directory entries, and 
other non-paged accesses: 

PCD output = PCD bit in CR3 

• For accesses to 4-Kbyte page table entries or 4-Mbyte 
pages: 

PCD output = PCD bit in page directory entry 

• For accesses to 4-Kbyte pages: 

PCD output = PCD bit in page table entry 

Driven and Floated PCD is driven off the same clock edge as ADS# and remains in 
the same state until the clock edge on which NA# or the last 
expected BRDY# of the cycle is sampled asserted. 

PCD is floated off the clock edge that BOFF# is sampled 
asserted and off the clock edge that the processor asserts 
HLDA in response to HOLD. 



Signal Descriptions 



5-29 






AM Din Preliminary Information 

AMD-K6™ MMX™ Enhanced Processor Data Sheet 



20695E/0— June 1997 



5.37 

Summary 



Driven 



PCHK# (Parity Check) 

Output 

The processor asserts PCHK# during read cycles if it detects an 
even parity error on one or more valid bytes of D[63:0] during a 
read cycle. (Even parity means that the total number of 1 bits 
within each byte of data and its respective data parity bit is 
even.) The processor checks data parity for the data bytes that 
are valid, as defined by BE[7:0]#, the byte enables. 

PCHK# is always driven but is only asserted for memory and 
I/O read bus cycles and the second cycle of an interrupt 
acknowledge sequence. PCHK# is not driven during any type of 
write cycles or special bus cycles. The processor does not take 
an internal exception as the result of detecting a data parity 
error, and system logic must respond appropriately to the 
assertion of this signal. 

The processor ensures that PCHK# does not glitch, enabling the 
signal to be used as a clocking source for system logic. 

PCHK# is always driven except in Tri-State Test mode. For 
each BRDY# returned to the processor during a read cycle with 
a parity error detected on the data bus, PCHK# is asserted for 
one clock, one clock edge after BRDY# is sampled asserted. 
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5.38 PWT (Page Writethrough) 

Output 

Summary The processor drives PWT to indicate the operating system’s 

specification of the writeback state or writethrough state for 
the page being addressed. PWT, together with WB/WT#, 
specifies the data cache-line state during cacheable read misses 
and write hits to shared cache lines. (See “WB/WT# (Writeback 
or Writethrough)” on page 5-38 for more details.) 

The state of PWT depends upon the processor’s operating mode 
and the state of certain bits in its control registers and TLB as 
follows: 

■ In Real mode, or in Protected and Virtual-8086 modes while 
paging is disabled (PG bit in CRO set to 0): 

PWT output = 0 (writeback state) 

■ In Protected and Virtual-8086 modes while paging is 
enabled (PG bit in CRO set to 1): 

• For accesses to I/O space, page directory entries, and 
other non-paged accesses: 

PWT output = PWT bit in CR3 

• For accesses to 4-Kbyte page table entries or 4-Mbyte 
pages: 

PWT output = PWT bit in page directory entry 

• For accesses to 4-Kbyte pages: 

PWT output = PWT bit in page table entry 

Driven and Floated PWT is driven off the same clock edge as ADS# and remains in 
the same state until the clock edge on which NA# or the last 
expected BRDY# of the cycle is sampled asserted. 

PWT is floated off the clock edge that BOFF# is sampled 
asserted and off the clock edge that the processor asserts 
HLDA in response to HOLD. 
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5.39 

Summary 

Sampled 

5.40 

Summary 



RESET (Reset) 

Input 

When the processor samples RESET asserted, it immediately 
flushes and initializes all internal resources and its internal 
state including its pipelines and caches, the floating-point 
state, the MMX state, and all registers, and then the processor 
jumps to address FFFF_FFF0h to start instruction execution. 

The signals BRDYC# and FLUSH# are sampled during the 
falling transition of RESET to select the drive strength of 
selected output signals and to invoke the Tri-State Test mode, 
respectively. (See these signal descriptions for more details.) 

RESET is sampled as a level-sensitive input on every clock 
edge. System logic can drive the signal either synchronously or 
asynchronously. 

During the initial power-on reset of the processor, RESET must 
remain asserted for a minimum of 1.0 ms after CLK and V cc 
reach specification before it is negated. 

During a warm reset, while CLK and V cc are within their 
specification, RESET must remain asserted for a minimum of 
15 clocks prior to its negation. 

RSVD (Reserved) 

Reserved signals are a special class of pins that can be treated 
in one of the following ways: 

■ As no-connect (NC) pins, in which case these pins are left 
unconnected 

■ As pins connected to the system logic as defined by the 
industry-standard Pentium interface (Socket 7) 

■ Any combination of NC and Socket 7 pins 

In any case, if the RSYD pins are treated accordingly, the 
normal operation of the AMD-K6 MMX enhanced processor is 
not adversely affected in any manner. 

See “Pin Designations” on page 19-1 for a list of the locations of 
the RSYD pins. 
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5.41 SCYC (Split Cycle) 

Output 

Summary The processor asserts SCYC during misaligned, locked 

transfers on the D[63:0] data bus. The processor generates 
additional bus cycles to complete the transfer of misaligned 
data. 

For purposes of bus cycles, the term aligned means: 

■ Any 1-byte transfers 

■ 2-byte and 4-byte transfers that lie within 4-byte address 
boundaries 

■ 8-byte transfers that lie within 8-byte address boundaries 

Driven and Floated SCYC is asserted off the same clock edge as ADS#, and negated 
off the clock edge on which NA# or the last expected BRDY# of 
the entire locked sequence is sampled asserted. SCYC is only 
valid during locked memory cycles. 

SCYC is floated off the clock edge that BOFF# is sampled 
asserted and off the clock edge that the processor asserts 
HLDA in response to HOLD. 

SMI# (System Management Interrupt) 

Input, Internal Pullup 

The assertion of SMI# causes the processor to enter System 
Management Mode (SMM). Upon recognizing SMI#, the 
processor performs the following actions, in the order shown: 

1. Flushes its instruction pipelines 

2. Completes all pending and in-progress bus cycles 

3. Acknowledges the interrupt by asserting SMIACT# after 
sampling EWBE# asserted 

4. Saves the internal processor state in SMM memory 

5. Disables interrupts by clearing the interrupt flag (IF) in 
EFLAGS and disables NMI interrupts 

6. Jumps to the entry point of the SMM service routine at the 
SMM base physical address which defaults to 0003_8000h in 
SMM memory 
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Summary 
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Sampled 



5.43 

Summary 

Driven 



See “System Management Mode (SMM)” on page 10-1 for more 
details regarding SMM. 

SMI# is sampled and latched as a falling edge-sensitive signal. 
SMI# is sampled on every clock edge but is not recognized until 
the next instruction boundary. If SMI# is to be recognized on 
the instruction boundary associated with a BRDY#, it must be 
sampled asserted a minimum of three clock edges before the 
BRDY# is sampled asserted. If it is asserted synchronously, it 
can be asserted for a minimum of one clock. If it is asserted 
asynchronously, it must have been negated for a minimum of 
two clocks followed by an assertion of a minimum of two clocks. 

A second assertion of SMI# while in SMM is latched but is not 
recognized until the SMM service routine is exited. 

SMIACT# (System Management Interrupt Active) 

Output 

The processor acknowledges the assertion of SMI# with the 
assertion of SMIACT# to indicate that the processor has 
entered System Management Mode (SMM). The system logic 
can use SMIACT# to enable SMM memory. See “SMI# (System 
Management Interrupt)” on page 5-33 for more details. 

See “System Management Mode (SMM)” on page 10-1 for more 
details regarding SMM. 

The processor asserts SMIACT# after the last BRDY# of the last 
pending bus cycle is sampled asserted (including all pending 
write cycles) and after EWBE# is sampled asserted. SMIACT# 
remains asserted until after the last BRDY# of the last pending 
bus cycle associated with exiting SMM is sampled asserted. 

SMIACT# remains asserted during any flush, internal snoop, or 
writeback cycle due to an inquire cycle. 
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5.44 

Summary 



Sampled 

5.45 

Summary 

Sampled 



STPCLK# (Stop Clock) 

Input, Internal Pullup 

The assertion of STPCLK# causes the processor to enter the 
Stop Grant state, during which the processor’s internal clock is 
stopped. From the Stop Grant state, the processor can 
subsequently transition to the Stop Clock state, in which the 
bus clock CLK is stopped. Upon recognizing STPCLK#, the 
processor performs the following actions, in the order shown: 

1. Flushes its instruction pipelines 

2. Completes all pending and in-progress bus cycles 

3. Acknowledges the STPCLK# assertion by executing a Stop 
Grant special bus cycle (see Table 21 on page 5-41) 

4. Stops its internal clock after BRDY# of the Stop Grant 
special bus cycle is sampled asserted and after EWBE# is 
sampled asserted 

5. Enters the Stop Clock state if the system logic stops the bus 
clock CLK (optional) 

See “Clock Control” on page 12-1 for more details regarding 
clock control. 

STPCLK# is sampled as a level-sensitive input on every clock 
edge but is not recognized until the next instruction boundary. 
System logic can drive the signal either synchronously or 
asynchronously. If it is asserted asynchronously, it must be 
asserted for a minimum pulse width of two clocks. 

STPCLK# must remain asserted until recognized, which is 
indicated by the completion of the Stop Grant special cycle. 

TCK (Test Clock) 

Input, Internal Pullup 

TCK is the clock for boundary-scan testing using the Test 
Access Port (TAP). See “Boundary-Scan Test Access Port 
(TAP)” on page 11-3 for details regarding the operation of the 
TAP controller. 

The processor always samples TCK, except while TRST# is 
asserted. 
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5.46 TDI (Test Data Input) 

Input, Internal Pullup 

Summary TDI is the serial test data and instruction input for 

boundary-scan testing using the Test Access Port (TAP). See 
“Boundary-Scan Test Access Port (TAP)” on page 11-3 for 
details regarding the operation of the TAP controller. 



Sampled 




The processor samples TDI on every rising TCK edge but only 
while in the Shift-IR and Shift-DR states. 


5.47 


TDO (Test Data Output) 






Output 


Summary 




TDO is the serial test data and instruction output for 
boundary-scan testing using the Test Access Port (TAP). See 
“Boundary-Scan Test Access Port (TAP)” on page 11-3 for 
details regarding the operation of the TAP controller. 


Driven and Floated 


The processor drives TDO on every falling TCK edge but only 
while in the Shift-IR and Shift-DR states. TDO is floated at all 
other times. 


5.48 


TMS (Test Mode Select) 






Input, Internal Pullup 


Summary 




TMS specifies the test function and sequence of state changes 
for boundary-scan testing using the Test Access Port (TAP). See 
“Boundary-Scan Test Access Port (TAP)” on page 11-3 for 
details regarding the operation of the TAP controller. 


Sampled 




The processor samples TMS on every rising TCK edge. If TMS is 
sampled High for five or more consecutive clocks, the TAP 
controller enters its Test-Logic-Reset state, regardless of the 
controller state. This action is the same as that achieved by 
asserting TRST#. 
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5.49 TRST# (Test Reset) 

Input, Internal Pullup 

The assertion of TRST# initializes the Test Access Port (TAP) 
by resetting its state machine to the Test-Logic-Reset state. See 
“Boundary-Scan Test Access Port (TAP)” on page 11-3 for 
details regarding the operation of the TAP controller. 

TRST# is a completely asynchronous input that does not 
require a minimum setup and hold time relative to TCK. See 
Table 56 on page 16-13 for the minimum pulse width 
requirement. 

5.50 VCC2DET (V CC2 Detect) 

Output 

Summary VCC2DET is tied to V ss (logic level 0) to indicate to the system 

logic that it must supply the specified processor core voltage to 
the Vcc2 pins. The Vcc2 Pi ns supply voltage to the processor 
core, independent of the voltage supplied to the I/O buffers on 
the V CC3 pins. 

Driven VCC2DET always equals 0 and is never floated — even during 

Tri-State Test mode. 

5.51 W/R# (Write/Read) 

Output 

Summary The processor drives W/R# to indicate whether it is performing 

a write or a read cycle on the bus. In addition, W/R# is used to 
define other bus cycles, including interrupt acknowledge and 
special cycles (see Table 21 on page 5-41 for more details). 

Driven and Floated W/R# is driven off the same clock edge as ADS# and remains in 
the same state until the clock edge on which NA# or the last 
expected BRDY# of the cycle is sampled asserted. W/R# is 
driven during memory cycles, I/O cycles, special bus cycles, and 
interrupt acknowledge cycles. 

W/R# is floated off the clock edge that BOFF# is sampled 
asserted and off the clock edge that the processor asserts 
HLDA in response to HOLD. 



Summary 



Sampled 
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5.52 

Summary 



Sampled 



WB/WT# (Writeback or Writethrough) 

Input 

WB/WT#, together with PWT, specifies the data cache-line state 
during cacheable read misses and write hits to shared cache 
lines. 

If WB/WT# = 0 or PWT = 1 during a cacheable read miss or write 
hit to a shared cache line, the accessed line is cached in the 
shared state. This is referred to as the writethrough state 
because all write cycles to this cache line are driven externally 
on the bus. 

If WB/WT# = 1 and PWT = 0 during a cacheable read miss or a 
write hit to a shared cache line, the accessed line is cached in 
the exclusive state. Subsequent write hits to the same line 
cause its state to transition from exclusive to modified. This is 
referred to as the writeback state because the data cache can 
contain modified cache lines that are subject to be written 
back — referred as a writeback cycle — as the result of an inquire 
cycle, an internal snoop, a flush operation, or the WBINVD 
instruction. 

WB/WT# is sampled on the clock edge that the first BRDY# or 
NA# of a bus cycle is sampled asserted. If the cycle is a burst 
read, WB/WT# is ignored during the last three assertions of 
BRDY#. WB/WT# is sampled during memory read and 
non-writeback write cycles and is ignored during all other types 
of cycles. 
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Table 16 . Input Pin Types 



Name 


Type 


A20M# 


Asynchronous 


AHOLD 


Synchronous 


BF[2:0] 


Synchronous 


BOFF# 


Synchronous 


BRDY# 


Synchronous 


BRDYC# 


Synchronous 


CLK 


Clock 


EADS# 


Synchronous 


EWBE# 


Synchronous 


FLUSH# 


Asynchronous 


HOLD 


Synchronous 


1 Notes: 




Name 


Type 


IGNNE# 


Asynchronous 


INIT 


Asynchronous 


INTR 


Asynchronous 


INV 


Synchronous 


KEN# 


Synchronous 


NA# 


Synchronous 




Asynchronous 


RESET 


Asynchronous 


SMI# 


Asynchronous 


STPCLK# 


Asynchronous 


m/m# 


Synchronous 




Note 2 



Note 5, 6 



Note 2 



Note 1 



7. These level-sensitive signals can be asserted synchronously or asynchronously. To be sampled on a specific clock edge, setup and 
hold times must be met. If asserted asynchronously, they must be asserted for a minimum pulse width of two clocks. 

2. These edge-sensitive signals can be asserted synchronously or asynchronously. To be sampled on a specific clock edge, setup and 
hold times must be met. If asserted asynchronously, they must have been negated at least two clocks prior to assertion and must 
remain asserted at least two clocks. 

3. FLUSH# is also sampled during the falling transition of RESET and can be asserted synchronously or asynchronously. To be 
sampled on a specific clock edge, setup and hold times must be met the clock edge before the clock edge on which RESET is 
sampled negated. If asserted asynchronously, FLUSH # must meet a minimum setup and hold time of two clocks relative to the 
negation of RESET. 

4. BF[2:0] are sampled during the falling transition of RESET. They must meet a minimum setup time of 1. 0 ms and a minimum hold 
time of two clocks relative to the negation of RESET. 

5. During the initial power-on reset of the processor, RESET must remain asserted for a minimum of 1.0 ms after CLK and reach 

specification before it is negated. 

6. During a warm reset, while CLK and V cc are within their specification, RESET must remain asserted for a minimum of 15 clocks 
prior to its negation. 

7. BRDYC # is also sampled during the falling transition of RESET. If RESET is driven synchronously, BRDYC '# must meet the specified 
hold time relative to the negation of RESET. If asserted asynchronously, BRDYC # must meet a minimum setup and hold time of 
two clocks relative to the negation of RESET. 
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Table 17. Output Pin Float Conditions 



Name 


Floated At: (Note 1) 


Note 


Name 


Floated At: (Note 1) 


Note 


A[4:3] 


HLDA, AHOLD, BOFF# 


Note 2, 3 


HUM# 


Always Driven 




ADS# 


HLDA, BOFF# 


Note 2 


HLDA 


Always Driven 




ADSC# 


HLDA, BOFF# 


Note 2 


LOCK# 


HLDA, BOFF# 


Note 2 


APCHK# 


Always Driven 




M/IO# 


HLDA, BOFF# 


Note 2 


BE[7:0]# 


HLDA, BOFF# 


Note 2 


PCD 


HLDA, BOFF# 


Note 2 


BREQ 


Always Driven 




PCHK# 


Always Driven 




CACHE# 


HLDA, BOFF# 


Note 2 


PWT 


HLDA, BOFF# 


Note 2 


D/C# 


HLDA, BOFF# 


Note 2 


SCYC 


HLDA, BOFF# 


Note 2 


FERR# 


Always Driven 




SMIACT# 


Always Driven 




HIT# 


Always Driven 




W/R# 


HLDA, BOFF# 


Note 2 



Notes: 

1. All outputs except VCC2DET and TDO float during Tri-State Test mode. 

2. Floated off the dock edge that BOFF # is sampled asserted and off the clock edge that HLDA is asserted. 

3. Floated off the clock edge that AHOLD is sampled asserted. 



Table 18. Input/Output Pin Float Conditions 

Floated At: (Note 1) 

HLDA, AHOLD, BOFF# 

HLDA, AHOLD, BOFF# 

HLDA, BOFF# 

HLDA, BOFF# 

Notes: 

1. All outputs except VCC2DET and TDO float during Tri-State Test mode. 

2. Floated off the clock edge that BOFF# is sampled asserted and off the clock edge that HLDA is asserted. 
3 Floated off the clock edge that AHOLD is sampled asserted. 



Note 

Note 2,3 
Note 2,3 
Note 2 
Note 2 



Name 

A[3 1 :5] 

AP 

D[63:0] 

DP[7:0] 



Table 19. Test Pins 



Name 


Type 


Note 


TCK 


Clock 




TDI 


Input 


Sampled on the rising edge of TCK 


TDO 


Output 


Driven on the falling edge of TCK 


TMS 


Input 


Sampled on the rising edge of TCK 


TRST# 


Input 


Asynchronous (Independent of TCK) 
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Table 20. Bus Cycle Definition 



Bus Cycle Initiated 


Generated by CPU 


Generated 
by System 


M/IO# 


D/C# 


W/R# 


CACHE# 


KEN# 


Code Read, Instruction Cache Line Fill 


1 


0 


0 


0 


0 


Code Read, Noncacheable 


1 


0 


0 


1 


X 


Code Read, Noncacheable 


1 


0 


0 


X 


1 


Encoding for Special Cycle 


0 


0 


1 


1 


X 


Interrupt Acknowledge 


0 


0 


0 


1 


X 


I/O Read 


0 


1 


0 


1 


X 


I/O Write 


0 


1 


1 


1 


X 


Memory Read, Data Cache Line Fill 




1 


0 


0 


0 


Memory Read, Noncacheable 


1 


1 


0 


1 


X 


Memory Read, Noncacheable 


1 


1 


0 


X 


1 


Memory Write, Data Cache Writeback 


1 


1 


1 


0 


X 


Memory Write, Noncacheable 


1 


1 


1 


1 


X 


Note: 

x means "don't care" 
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6 Bus Cycles 



The following sections describe and illustrate the timing and 
relationship of bus signals during various types of bus cycles. A 
representative set of bus cycles is illustrated. 

6.1 Timing Diagrams 

The timing diagrams illustrate the signals on the external local 
bus as a function of time, as measured by the bus clock (CLK). 
Throughout this chapter, the term clock refers to a signal 
bus-clock cycle. A clock extends from one rising CLK edge to 
the next rising CLK edge. The processor samples and drives 
most signals relative to the rising edge of CLK. The exceptions 
to this rule include the following: 

■ BF[2:0] — Sampled on the falling edge of RESET 

■ FLUSH#, BRDYC#— Sampled on the falling edge of RESET, 
also sampled on the rising edge of CLK 

■ All inputs and outputs are sampled relative to TCK in 
Boundary-Scan Test Mode. Inputs are sampled on the rising 
edge of TCK, outputs are driven off of the falling edge of 
TCK. 



For each signal in the timing diagrams, the High level 
represents 1, the Low level represents 0, and the Middle level 
represents the floating (high-impedance) state. When both the 
High and Low levels are shown, the meaning depends on the 
signal. A single signal indicates ‘don’t care’. In the case of bus 
activity, if both High and Low levels are shown, it indicates the 
processor, alternate master, or system logic is driving a value, 
but this value may or may not be valid. (For example, the value 
on the address bus is valid only during the assertion of ADS#, 
but addresses are also driven on the bus at other times.) Figure 
44 defines the different waveform representations. 
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Waveform 



Description 



f 

\ 

X 



55 



Don't care or bus is driven 

Signal or bus is changing from Low to High 

Signal or bus is changing from High to Low 



Bus is changing 



Bus is changing from valid to invalid 



Signal or bus is floating 
Denotes multiple clock periods 



Figure 44. Waveform Definitions 

For all active-High signals, the term asserted means the signal is 
in the High-voltage state and the term negated means the signal 
is in the Low-voltage state. For all active-Low signals, the term 
asserted means the signal is in the Low-voltage state and the 
term negated means the signal is in the High-voltage state. 
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6.2 Bus State Machine Diagram 



j Bus State 




Note: The processor transitions to the IDLE state the clock edge on which BOFF# or RESET is sampled asserted. 



Figure 45. Bus State Machine Diagram 
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Idle The processor does not drive the system bus in the Idle state 

and remains in this state until a new bus cycle is requested. The 
processor enters this state off the clock edge on which the last 
BRDY# of a cycle is sampled asserted during the following 
conditions: 

■ The processor is in the Data state 

■ The processor is in the Data-NA# Requested state and no 
internal pending cycle is requested 

In addition, the processor is forced into this state when the 
system logic asserts RESET or BOFF#. The transition to this 
state occurs on the clock edge on which RESET or BOFF# is 
sampled asserted. 

Address In this state, the processor drives ADS# to indicate the 

beginning of a new bus cycle by validating the address and 
control signals. The processor remains in this state for one 
clock and unconditionally enters the data state on the next 
clock edge. 

Data In the Data state, the processor drives the data bus during a 

write cycle or expects data to be returned during a read cycle. 
The processor remains in this state until either NA# or the last 
BRDY# is sampled asserted. If the last BRDY# is sampled 
asserted or both the last BRDY# and NA# are sampled asserted 
on the same clock edge, the processor enters the Idle state. If 
NA# is sampled asserted first, the processor enters the 
Data-NA# Requested state. 

Data-NA# Requested If the processor samples NA# asserted while in the Data state 
and the current bus cycle is not completed (the last BRDY# is 
not sampled asserted), it enters the Data-NA# Requested state. 
The processor remains in this state until either the last BRDY# 
is sampled asserted or an internal pending cycle is requested. If 
the last BRDY# is sampled asserted before the processor drives 
a new bus cycle, the processor enters the Idle state (no internal 
pending cycle is requested) or the Address state (processor has 
a internal pending cycle). 

Pipeline Address In this state, the processor drives ADS# to indicate the 

beginning of a new bus cycle by validating the address and 
control signals. In this state, the processor is still waiting for the 
current bus cycle to be completed (until the last BRDY# is 
sampled asserted). If the last BRDY# is not sampled asserted, 
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Pipeline Data 



Transition 



the processor enters the pipeline data state and continues to 
sample BRDY# until the last BRDY# is asserted to indicate the 
current bus cycle has completed. 

When processor samples the last BRDY# asserted in this state, 
it determines if a bus transition is required between the 
current bus cycle and the pipelined bus cycle. A bus transition 
is required when the data bus direction changes between bus 
cycles, such as a memory write cycle followed by a memory 
read cycle. If a bus transition is required, the processor enters 
the Transition state for one clock to prevent data bus 
contention. If a bus transition is not required, the processor 
enters the Data state. 

Two bus cycles are concurrently executing in this state. The 
processor cannot issue any additional bus cycles until the 
current bus cycle is completed. The processor drives the data 
bus during write cycles or expects data to be returned during 
read cycles for the current bus cycle until the last BRDY# of the 
current bus cycle is sampled asserted. 

When the processor samples the last BRDY# asserted in this 
state, it detects if a bus transition is needed between the 
current bus cycle and the pipelined bus cycle. If the bus 
transition is needed, the processor enters the Transition state 
for one clock to prevent data bus contention. If the bus 
transition is not needed, the processor enters the Data state. 

The processor enters this state for one clock during data bus 
transitions and enters the Data state on the next clock edge if 
NA# is not sampled asserted. The sole purpose of this state is to 
avoid bus contention caused by bus transitions during pipeline 
operation. 
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6.3 Memory Reads and Writes 

The AMD-K6 MMX enhanced processor performs single or 
burst memory bus cycles. The single-transfer memory bus cycle 
transfers 1, 2, 4, or 8 bytes and requires a minimum of two 
clocks. Misaligned instructions or operands result in a split 
cycle, which requires multiple transactions on the bus. A burst 
cycle consists of four back-to-back 8-byte (64-bit) transfers on 
the data bus. 

Single-Transfer Figure 46 shows a single-transfer read from memory, followed 

Memory Read and by two single-transfer writes to memory. For the memory read 

Write cycle, the processor asserts ADS# for one clock to validate the 

bus cycle and also drives A[31:3], BE[7:0]#, D/C#, W/R#, and 
M/IO# to the bus. The processor then waits for the system logic 
to return the data on D[63:0] (with DP[7:0] for parity checking) 
and assert BRDY#. The processor samples BRDY# on every 
clock edge starting with the clock edge after the clock edge that 
negates ADS#. See “BRDY# (Burst Ready)” on page 5-10. 

During the read cycle, the processor drives PCD, PWT, and 
CACHE# to indicate its caching and cache-coherency intent for 
the access. The system logic returns KEN# and WB/WT# to 
either confirm or change this intent. If the processor asserts 
PCD and negates CACHE#, the accesses are non-cacheable, 
even though the system logic asserts KEN# during the BRDY# 
to indicate its support for cacheability. The processor (which 
drives CACHE#) and the system logic (which drives KEN#) 
must agree in order for an access to be cacheable. 

The processor can drive another cycle (in this example, a write 
cycle) by asserting ADS# off the next clock edge after BRDY# is 
sampled asserted. Therefore, an idle clock is guaranteed 
between any two bus cycles. The processor drives D[63:0] with 
valid data one clock edge after the clock edge on which ADS# is 
asserted. To minimize CPU idle times, the system logic stores the 
address and data in write buffers, returns BRDY#, and performs 
the store to memory later. If the processor samples EWBE# 
negated during a write cycle, it suspends certain activities until 
EWBE# is sampled asserted. See “EWBE# (External Write 
Buffer Empty)” on page 5-17. In Figure 46, the second write cycle 
occurs during the execution of a serializing instruction. The 
processor delays the following cycle until EWBE# is sampled 
asserted. 
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Misaligned 
Single-Transfer 
Memory Read and 
Write 



Figure 47 shows a misaligned (split) memory read followed by a 
misaligned memory write. Any cycle that is not aligned as 
defined in “SCYC (Split Cycle)” on page 5-33 is considered 
misaligned. When the processor encounters a misaligned 
access, it determines the appropriate pair of bus cycles — each 
with its own ADS# and BRDY# — required to complete the 
access. 

The AMD-K6 processor performs misaligned memory reads and 
memory writes using least-significant bytes (LSBs) first 
followed by most-significant bytes (MSBs). Table 22 shows the 
order. In the first memory read cycle in Figure 47, the processor 
reads the least-significant bytes. Immediately after the 
processor samples BRDY# asserted, it drives the second bus 
cycle to read the most-significant bytes to complete the 
misaligned transfer. 



Table 22. Bus-Cycle Order During Misaligned Transfers 



Type of Access 


First Cycle 


Second Cycle 


Memory Read 


LSBs 


MSBs 


Memory Write 


LSBs 


MSBs 



Similarly, the misaligned memory write cycle in Figure 47 
transfers the LSBs to the memory bus first. In the next cycle, 
after the processor samples BRDY# asserted, the MSBs are 
written to the memory bus. 
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Figure 47. Misaligned Single-Transfer Memory Read and Write 
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Burst Reads and 
Pipelined Burst Reads 



Figure 48 shows normal burst read cycles and a pipelined burst 
read cycle. The AMD-K6 drives CACHE# and ADS# together to 
specify that the current bus cycle is a burst cycle. If the 
processor samples KEN# asserted with the first BRDY#, it 
performs burst transfers. During the burst transfers, the system 
logic must ignore BE[7:0]# and must return all eight bytes 
beginning at the starting address the processor asserts on 
A[31:3]. Depending on the starting address, the system logic 
must determine the successive quadword addresses (A[4:3]) for 
each transfer in a burst, as shown in Table 23. The processor 
expects the second, third, and fourth quadwords to occur in the 
sequences shown in Table 23. 



Table 23. A[4:3] Address-Generation Sequence During Bursts 



Address Driven By 
Processor on A[4:3] 


A[4:3] Addresses of Subsequent 
Quadwords* Generated By System Logic 


Quadword 1 


Quadword 2 


Quadword 3 


Quadword 4 


oob 


01b 


10b 


11b 


01b 


00b 


lib 


10b 


10b 


11b 


00b 


01b 


11b 


10b 


01b 


00b 


Note: 

* quadword = 8 bytes 



In Figure 48, the processor drives CACHE# throughout all burst 
read cycles. In the first burst read cycle, the processor drives 
ADS# and CACHE#, then samples BRDY# on every clock edge 
starting with the clock edge after the clock edge that negates 
ADS#. The processor samples KEN# asserted on the clock edge 
on which the first BRDY# is sampled asserted, executes a 
32-byte burst read cycle, and expects to sample BRDY# a total 
of four times. An ideal no-wait state access is shown in Figure 
48, whereas most system logic solutions add wait states 
between the transfers. 

The second burst read cycle illustrates a similar sequence, but 
the processor samples NA# asserted on the same clock edge 
that the first BRDY# is sampled asserted. NA# assertion 
indicates the system logic is requesting the processor to output 
the next address early (also known as a pipeline transfer 
request). Without waiting for the current cycle to complete, the 
processor drives ADS# and related signals for the next burst 
cycle. Pipelining can reduce CPU cycle-to-cycle idle times. 
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Burst Writeback 



Figure 49 shows a burst read followed by a writeback 
transaction. The AMD-K6 processor initiates writebacks under 
the following conditions: 

■ Replacement — If a cache-line fill is initiated for a cache line 
currently filled with valid entries, the processor uses a 
least-recently-allocated (LRA) algorithm to select a line for 
replacement. Before a replacement is made to a data cache 
line that is in the modified state, the modified line is 
scheduled to be written back to memory. 

■ Internal Snoop — The processor snoops the data cache 
whenever an instruction-cache line is read, and it snoops the 
instruction cache whenever a data cache line is written. This 
snooping is performed to determine whether the same 
address is stored in both caches, a situation that is taken to 
imply the occurrence of self -modifying code. If a snoop hits a 
data cache line in the modified state, the line is written back 
to memory before being invalidated. 

■ WBINVD Instruction — When the processor executes a 
WBINYD instruction, it writes back all modified lines in the 
data cache and then invalidates all lines in both caches. 

■ Cache Flush — When the processor samples FLUSH# 
asserted, it executes a flush acknowledge special cycle and 
writes back all modified lines in the data cache and then 
invalidates all lines in both caches. 

The processor drives writeback cycles during inquire or cache 
flush cycles. The writeback shown in Figure 49 is caused by a 
cache-line replacement. The processor completes the burst 
read cycle that fills the cache line. Immediately following the 
burst read cycle is the burst writeback cycle that represents the 
modified line to be written back to memory. D[63:0] are driven 
one clock edge after the clock edge on which ADS# is asserted 
and are subsequently changed off the clock edge on which each 
BRDY# assertion of the burst cycle is sampled. 
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6.4 I/O Read and Write 

Basic I/O Read and The processor accesses I/O when it executes an I/O instruction 

Write (for example, IN or OUT). Figure 50 shows an I/O read followed 

by an I/O write. The processor drives M/IO# Low and D/C# High 
during I/O cycles. In this example, the first cycle shows a single 
wait state I/O read cycle. It follows the same sequence as a 
single-transfer memory read cycle. The processor drives ADS# 
to initiate the bus cycle, then it samples BRDY# on every clock 
edge starting with the clock edge after the clock edge that 
negates ADS#. The system logic must return BRDY# to 
complete the cycle. When the processor samples BRDY# 
asserted, it can assert ADS# for the next cycle off the next clock 
edge. (In this example, an I/O write cycle.) 

The I/O write cycle is similar to a memory write cycle, but the 
processor drives M/IO# low during an I/O write cycle. The 
processor asserts ADS# to initiate the bus cycle. The processor 
drives D[63:0] with valid data one clock edge after the clock 
edge on which ADS# is asserted. The system logic must assert 
BRDY# when the data is properly stored to the I/O destination. 
The processor samples BRDY# on every clock edge starting 
with the clock edge after the clock edge that negates ADS#. In 
this example, two wait states are inserted while the processor 
waits for BRDY# to be asserted. 




Figure 50. Basic I/O Read and Write 
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Table 24 shows the misaligned I/O read and write cycle order 
executed by the AMD-K6. In Figure 51, the least-significant 
bytes (LSBs) are transferred first. Immediately after the 
processor samples BRDY# asserted, it drives the second bus 
cycle to transfer the most-significant bytes (MSBs) to complete 
the misaligned bus cycle. 



Table 24. Bus-Cycle Order During Misaligned I/O Transfers 



Type of Access 


First Cycle 


Second Cycle 


I/O Read 


LSBs 


MSBs 


I/O Write 


LSBs 


MSBs 



Misaligned I/O Read 
and Write 



Misaligned I/O Read 
|ADDR; DATA DATA, IDLE ADDR DATA DATA, IDLE 



Misaligned I/O Write 
ADDR DATA DATA DATA IDLE ; ADDR DATA DATA DATA IDLE | 




Figure 51. Misaligned I/O Transfer 
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6.5 Inquire and Bus Arbitration Cycles 

The AMD-K6 MMX enhanced processor provides built-in 
level-one data and instruction caches. Each cache is 32 Kbytes 
and two-way set-associative. The system logic or other bus 
master devices can initiate an inquire cycle to maintain 
cache/memory coherency. In response to the inquire cycle, the 
processor compares the inquire address with its cache tag 
addresses in both caches, and, if necessary, updates the MESI 
state of the cache line and performs writebacks to memory. 

An inquire cycle can be initiated by asserting AHOLD, BOFF#, 
or HOLD. AHOLD is exclusively used to support inquire cycles. 
During AHOLD-initiated inquire cycles, the processor only 
floats the address bus. BOFF# provides the fastest access to the 
bus because it aborts any processor cycle that is in-progress, 
whereas AHOLD and HOLD both permit an in-progress bus 
cycle to complete. During HOLD-initiated and BOFF#-initiated 
inquire cycles, the processor floats all of its bus-driving signals. 

Hold and Hold The system logic or another bus device can assert HOLD to 

Acknowledge Cycle initiate an inquire cycle or to gain full control of the bus. When 

the AMD-K6 processor samples HOLD asserted, it completes 
any in-progress bus cycle and asserts HLDA to acknowledge 
release of the bus. The processor floats the following signals off 
the same clock edge that HLDA is asserted: 



A[31:3] 


■ 


DP[7:0] 


ADS# 


■ 


LOCK# 


AP# 


■ 


M/IO# 


BE[7:0]# 


■ 


PCD 


CACHE# 


■ 


PWT 


D[63:0] 


■ 


SCYC 


D/C# 


■ 


W/R# 



Figure 52 shows a basic HOLD/HLDA operation. In this 
example, the processor samples HOLD asserted during the 
memory read cycle. It continues the current memory read cycle 
until BRDY# is sampled asserted. The processor drives HLDA 
and floats its outputs one clock edge after the last BRDY# of the 
cycle is sampled asserted. The system logic can assert HOLD for 
as long as it needs to utilize the bus. The processor samples 
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HOLD on every clock edge but does not assert HLDA until any 
in-progress cycle or sequence of locked cycles is completed. 

When the processor samples HOLD negated during a hold 
acknowledge cycle, it negates HLDA off the next clock edge. 
The processor regains control of the bus and can assert ADS# 
off the same clock edge on which HLDA is negated. 

CLK 
A[31:3] 

BE[7:0]# 

ADS# 

M/IO# 

D/C# 

W/R# 

D [63 :0] 

HOLD 
HLDA 
BRDY# 

Figure 52. Basic HOLD/HLDA Operation 
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HOLD-lnitiated 
Inquire Hit to Shared 
or Exclusive Line 



Figure 53 shows a HOLD-initiated inquire cycle. In this 
example, the processor samples HOLD asserted during the 
burst memory read cycle. The processor completes the current 
cycle (until the last expected BRDY# is sampled asserted), 
asserts HLDA and floats its outputs as described on page 6-16. 

The system logic drives an inquire cycle within the hold 
acknowledge cycle. It asserts EADS#, which validates the 
inquire address on A[31:5], If EADS# is sampled asserted 
before HOLD is sampled negated, the processor recognizes it as 
a valid inquire cycle. 

In Figure 53, the processor asserts HIT# and negates HITM# on 
the clock edge after the clock edge on which EADS# is sampled 
asserted, indicating the current inquire cycle hit a shared or 
exclusive cache line. (Shared and exclusive cache lines in the 
processor data or instruction cache have the same contents as 
the data in the external memory.) During an inquire cycle, the 
processor samples INV to determine whether the addressed 
cache line found in the processor’s instruction or data cache 
transitions to the invalid state or the shared state. In this 
example, the processor samples INV asserted with EADS#, 
which invalidates the cache line. 

The system logic can negate HOLD off the same clock edge on 
which EADS# is sampled asserted. The processor continues 
driving HIT# in the same state until the next inquire cycle. 
HITM# is not asserted unless HIT# is asserted. 
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Figure 54 shows the same sequence as Figure 53, but in Figure 
54 the inquire cycle hits a modified line and the processor 
asserts both HIT# and HITM#. In this example, the processor 
performs a writeback cycle immediately after the inquire cycle. 
It updates the modified cache line to the external memory 
(normally, level-two cache or DRAM). The processor uses the 
address (A[31:5]) that was latched during the inquire cycle to 
perform the writeback cycle. The processor asserts HITM# 
throughout the writeback cycle and negates HITM# one clock 
edge after the last expected BRDY# of the writeback is 
sampled asserted. 

When the processor samples EADS# during the inquire cycle, it 
also samples INY to determine the cache line MESI state after 
the inquire cycle. If INV is sampled asserted during an inquire 
cycle, the processor transitions the line (if found) to the invalid 
state, regardless of its previous state. The cache line 
invalidation operation is not visible on the bus. If INV is 
sampled negated during an inquire cycle, the processor 
transitions the line (if found) to the shared state. In Figure 54 
the processor samples INV asserted during the inquire cycle. 

In a HOLD-initiated inquire cycle, the system logic can negate 
HOLD off the same clock edge on which EADS# is sampled 
asserted. The processor drives HIT# and HITM# on the clock 
edge after the clock edge on which EADS# is sampled asserted. 
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AHOLD-lnitiated 
Inquire Miss 



AHOLD can be asserted by the system to initiate one or more 
inquire cycles. To allow the system to drive the address bus 
during an inquire cycle, the processor floats A[31:3] and AP off 
the clock edge on which AHOLD is sampled asserted. The data 
bus and all other control and status signals remain under the 
control of the processor and are not floated. This functionality 
allows a bus cycle in progress when AHOLD is sampled 
asserted to continue to completion. The processor resumes 
driving the address bus off the clock edge on which AHOLD is 
sampled negated. 

In Figure 55, the processor samples AHOLD asserted during the 
memory burst read cycle, and it floats the address bus off the 
same clock edge on which it samples AHOLD asserted. While 
the processor still controls the bus, it completes the current 
cycle until the last expected BRDY# is sampled asserted. The 
system logic drives EADS# with an inquire address on A[31:5] 
during an inquire cycle. The processor samples EADS# asserted 
and compares the inquire address to its tag address in both the 
instruction and data caches. In Figure 55, the inquire address 
misses the tag address in the processor (both HIT# and HITM# 
are negated). Therefore, the processor proceeds to the next 
cycle when it samples AHOLD negated. (The processor can 
drive a new cycle by asserting ADS# off the same clock edge 
that it samples AHOLD negated.) 

For an AHOLD-initiated inquire cycle to be recognized, the 
processor must sample AHOLD asserted for at least two 
consecutive clocks before it samples EADS# asserted. If the 
processor detects an address parity error during an inquire 
cycle, APCHK# is asserted for one clock. The system logic must 
respond appropriately to the assertion of this signal. 
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AHOLD-lnitiated 
Inquire Hit to Shared 
or Exclusive Line 



In Figure 56, the processor asserts HIT# and negates HITM# off 
the clock edge after the clock edge on which EADS# is sampled 
asserted, indicating the current inquire cycle hits either a 
shared or exclusive line. (HIT# is driven in the same state until 
the next inquire cycle.) The processor samples INV asserted 
during the inquire cycle and transitions the line to the invalid 
state regardless of its previous state. 

During an AHOLD-initiated inquire cycle, the processor 
samples AHOLD on every clock edge until it is negated. In 
Figure 56, the processor asserts ADS# off the same clock on 
which AHOLD is sampled negated. If the inquire cycle hits a 
modified line, the processor performs a writeback cycle before 
it drives a new bus cycle. The next section describes the 
AHOLD-initiated inquire cycle that hits a modified line. 
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AHOLD-lnitiated 
Inquire Hit to 
Modified Line 



Figure 57 shows an AHOLD-initiated inquire cycle that hits a 
modified line. During the inquire cycle in this example, the 
processor asserts both HIT# and HITM# on the clock edge after 
the clock edge that it samples EADS# asserted. This condition 
indicates that the cache line exists in the processor’s data cache 
in the modified state. 

If the inquire cycle hits a modified line, the processor performs 
a writeback cycle immediately after the inquire cycle to update 
the modified cache line to shared memory (normally level-two 
cache or DRAM). In Figure 57, the system logic holds AHOLD 
asserted throughout the inquire cycle and the processor 
writeback cycle. In this case, the processor is not driving the 
address bus during the writeback cycle because AHOLD is 
sampled asserted. The system logic writes the data to memory 
by using its latched copy of the inquire cycle address. If the 
processor samples AHOLD negated before it performs the 
writeback cycle, it drives the writeback cycle by using the 
address (A[31:5]) that it latched during the inquire cycle. 

If INV is sampled asserted during an inquire cycle, the 
processor transitions the line (if found) to the invalid state, 
regardless of its previous state (the cache invalidation 
operation is not visible on the bus). If INV is sampled negated 
during an inquire cycle, the processor transitions the line (if 
found) to the shared state. In either case, if the line is found in 
the modified state, the processor writes it back to memory 
before changing its state. Figure 57 shows that the processor 
samples INV asserted during the inquire cycle and invalidates 
the cache line after the inquire cycle. 



6-26 



Bus Cycles 






Bus Cycles 



6-27 







AM D £1 Preliminary Information 

AMD-K6 ™ MMX™ Enhanced Processor Data Sheet 



20695E/0— June 1997 



AHOLD Restriction 



When the system logic drives an AHOLD-initiated inquire 
cycle, it must assert AHOLD for at least two clocks before it 
asserts EADS#. This requirement guarantees the processor 
recognizes and responds to the inquire cycle properly. The 
processor’s 32 address bus drivers turn on almost immediately 
after AHOLD is sampled negated. If the processor switches the 
data bus (D[63:0] and DP[7:0]) during a write cycle off the same 
clock edge that switches the address bus (A[31:3] and AP), the 
processor switches 102 drivers simultaneously, which can lead 
to ground-bounce spikes. Therefore, before negating AHOLD 
the following restrictions must be observed by the system logic: 

■ When the system logic negates AHOLD during a write cycle, 
it must ensure that AHOLD is not sampled negated on the 
clock edge on which BRDY# is sampled asserted (See Figure 
58). 

■ When the system logic negates AHOLD during a writeback 
cycle, it must ensure that AHOLD is not sampled negated on 
the clock edge on which ADS# is negated (See Figure 58). 

■ When a write cycle is pipelined into a read cycle, AHOLD 
must not be sampled negated on the clock edge after the 
clock edge on which the last BRDY# of the read cycle is 
sampled asserted to avoid the processor simultaneously 
driving the data bus (for the pending write cycle) and the 
address bus off this same clock edge. 



r 
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HUM# 

EADS# 




D[63:0] [ 
BRDY# 

AHOLD 



The system miist ensure that AHOLD is not sampled negated on the clock edge that ADS# is negated. 



tt \i rTm 



The system must ensure that AHOLD is not sampled negated on the clock edge on which BRDY# is sample 
asserted. 



Figure 58. AHOLD Restriction 
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Bus Backoff (BOFF#) 



BOFF# provides the fastest response among bus-hold inputs. 
Either the system logic or another bus master can assert BOFF# 
to gain control of the bus immediately. BOFF# is also used to 
resolve potential deadlock problems that arise as a result of 
inquire cycles. The processor samples BOFF# on every clock 
edge. If BOFF# is sampled asserted, the processor 
unconditionally aborts any cycles in progress and transitions to 
a bus hold state. (See “BOFF# (Backoff)” on page 5-9.) Figure 
59 shows a read cycle that is aborted when the processor 
samples BOFF# asserted even though BRDY# is sampled 
asserted on the same clock edge. The read cycle is restarted 
after BOFF# is sampled negated (KEN# must be in the same 
state during the restarted cycle as its state during the aborted 
cycle). 

During a BOFF#-initiated inquire cycle that hits a shared or 
exclusive line, the processor samples BOFF# negated and 
restarts any bus cycle that was aborted when BOFF# was 
asserted. If a BOFF#-initiated inquire cycle hits a modified line, 
the processor performs a writeback cycle before it restarts the 
aborted cycle. 

If the processor samples BOFF# asserted on the same clock 
edge that it asserts ADS#, ADS# is floated but the system logic 
may erroneously interpret ADS# as asserted. In this case, the 
system logic must properly interpret the state of ADS# when 
BOFF# is negated. 
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Locked Cycles 



Basic Locked 
Operation 



The processor asserts LOCK# during a sequence of bus cycles to 
ensure the cycles are completed without allowing other bus 
masters to intervene. Locked operations can consist of two to 
five cycles. LOCK# is asserted during the following operations: 

■ An interrupt acknowledge sequence 

■ Descriptor Table accesses 

■ Page Directory and Page Table accesses 

■ XCHG instruction 

■ An instruction with an allowable LOCK prefix 

In order to ensure that locked operations appear on the bus and 
are visible to the entire system, any data operands addressed 
during a locked cycle that reside in the processor’s cache are 
flushed and invalidated from the cache prior to the locked 
operation. If the cache line is in the modified state, it is written 
back and invalidated prior to the locked operation. Likewise, 
any data read during a locked operation is not cached. The 
processor negates LOCK# for at least one clock between 
consecutive sequences of locked operations to allow the system 
logic to arbitrate for the bus. 

The processor asserts SCYC during misaligned locked transfers 
on the D[63:0] data bus. The processor generates additional bus 
cycles to complete the transfer of misaligned data. 

Figure 60 shows a pair of read-write bus cycles. It represents a 
typical read-modify-write locked operation. The processor 
asserts LOCK# off the same clock edge that it asserts ADS# of 
the first bus cycle in the locked operation and holds it asserted 
until the last expected BRDY# of the last bus cycle in the 
locked operation is sampled asserted. (The processor negates 
LOCK# off the same clock edge.) 
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Locked Operation 
with BOFF# 
Intervention 



Figure 61 shows BOFF# asserted within a locked read-write 
pair of bus cycles. In this example, the processor asserts LOCK# 
with ADS# to drive a locked memory read cycle followed by a 
locked memory write cycle. During the locked memory write 
cycle in this example, the processor samples BOFF# asserted. 
The processor immediately aborts the locked memory write 
cycle and floats all its bus-driving signals, including LOCK#. 
The system logic or another bus master can initiate an inquire 
cycle or drive a new bus cycle one clock edge after the clock 
edge on which BOFF# is sampled asserted. If the system logic 
drives a BOFF#-initiated inquire cycle and hits a modified line, 
the processor performs a writeback cycle before it restarts the 
locked cycle (the processor asserts LOCK# during the 
writeback cycle). 

In Figure 61, the processor immediately restarts the aborted 
locked write cycle by driving the bus off the clock edge on 
which BOFF# is sampled negated. The system logic must ensure 
the processor results for interrupted and uninterrupted locked 
cycles are consistent. That is, the system logic must guarantee 
the memory accessed by the processor is not modified during 
the time another bus master controls the bus. 
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Interrupt 

Acknowledge 



In response to recognizing the system’s maskable interrupt 
(INTR), the processor drives an interrupt acknowledge cycle at 
the next instruction boundary. During an interrupt 
acknowledge cycle, the processor drives a locked pair of read 
cycles as shown in Figure 62. The first read cycle is not 
functional, and the second read cycle returns the interrupt 
number on D[7:0] (OOh-FFh). Table 25 shows the state of the 
signals during an interrupt acknowledge cycle. 



Table 25. Interrupt Acknowledge Operation Definition 



Processor Outputs 


First Bus Cycle 


Second Bus Cycle 


D/C# 


Low 


Low 


M/10# 


Low 


Low 


W/R# 


Low 


Low 


BE[7:0]# 


EFh 


FEh (low byte enabled) 


A[31:3] 


0000_0000h 


0000_0000h 


D[63:0] 


(ignored) 


Interrupt number expected from interrupt 
controller on D[7:0] 



The system logic can drive INTR either synchronously or 
asynchronously. If it is asserted asynchronously, it must be 
asserted for a minimum pulse width of two clocks. To ensure it 
is recognized, INTR must remain asserted until an interrupt 
acknowledge sequence is complete. 
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Figure 62 . Interrupt Acknowledge Operation 
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6.6 Special Bus Cycles 

The AMD-K6 MMX enhanced processor drives special bus 
cycles that include stop grant, flush acknowledge, cache 
writeback invalidation, halt, cache invalidation, and shutdown 
cycles. During all special cycles, D/C# = 0, M/IO# = 0, and 
W/R# = 1. BE[7:0]# and A[31:3] are driven to differentiate 
among the special cycles, as shown in Table 26. The system 
logic must return BRDY# in response to all processor special 
cycles. 



Table 26 . Encodings For Special Bus Cycles 



BE[7:0]# 


A[4:3]* 


Special Bus Cycle 


Cause 


FBh 


10b 


Stop Grant 


STPCLK# sampled asserted 


EFh 


00b 


Flush Acknowledge 


FLUSH# sampled asserted 


F7h 


00b 


Writeback 


WBINVD instruction 


FBh 


00b 


Halt 


HLT instruction 


FDh 


00b 


Flush 


INVD,WBINVD instruction 


FEh 


00b 


Shutdown 


Triple fault 


Note: 

* A[3 1:5] = 0 



Basic Special Bus Figure 63 shows a basic special bus cycle. The processor drives 

Cycle D/C# = 0, M/IO# = 0, and W/R# = 1 off the same clock edge that 

it asserts ADS#. In this example, BE[7:0]# = FBh and A[31:3] = 
0000_0000h, which indicates that the special cycle is a halt 
special cycle (See Table 26). A halt special cycle is generated 
after the processor executes the HLT instruction. 

If the processor samples FLUSH# asserted, it writes back any 
data cache lines that are in the modified state and invalidates 
all lines in the instruction and data cache. The processor then 
drives a flush acknowledge special cycle. 

If the processor executes a WBINVD instruction, it drives a 
writeback special cycle after the processor completes 
invalidating and writing back the cache lines. 
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Shutdown Cycle In Figure 64, a shutdown (triple fault) occurs in the first half of 

the waveform, and a shutdown special cycle follows in the 
second half. The processor enters shutdown when an interrupt • 
or exception occurs during the handling of a double fault (INT 
8), which amounts to a triple fault. When the processor 
encounters a triple fault, it stops its activity on the bus and 
generates the shutdown special bus cycle (BE[7:0]# = FEh). 

The system logic must assert NMI, INIT, RESET, or SMI# to get 
the processor out of the shutdown state. 



Shutdown Occurs 
(Triple Fault) 



Shutdown Special Cycle 





20695^/0— June 1997 



(, 



Preliminary Information AM DEI 

AMD-K6™ MMX™ Enhanced Processor Data Sheet 



Stop Grant and Stop 
Clock States 



Figure 65 and Figure 66 show the processor transition from 
normal execution to the Stop Grant state, then to the Stop 
Clock state, back to the Stop Grant state, and finally back to 
normal execution. The series of transitions begins when the 
processor samples STPCLK# asserted. On recognizing a 
STPCLK# interrupt at the next instruction retirement 
boundary, the processor performs the following actions, in the 
order shown: 

1. Its instruction pipelines are flushed 

2. All pending and in-progress bus cycles are completed 

3. The STPCLK# assertion is acknowledged by executing a 
Stop Grant special bus cycle 

4. Its internal clock is stopped after BRDY# of the Stop Grant 
special bus cycle is sampled asserted and after EWBE# is 
sampled asserted 

5. The Stop Clock state is entered if the system logic stops the 
bus clock CLK (optional) 

STPCLK# is sampled as a level-sensitive input on every clock 
edge but is not recognized until the next instruction boundary. 
The system logic drives the signal either synchronously or 
asynchronously. If it is asserted asynchronously, it must be 
asserted for a minimum pulse width of two clocks. STPCLK# 
must remain asserted until recognized, which is indicated by 
the completion of the Stop Grant special cycle. 
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INIT-lnitiated 
Transition from 
Protected Mode to 
Real Mode 



INIT is typically asserted in response to a BIOS interrupt that 
writes to an I/O port. This interrupt is often in response to a 
Ctrl-Alt-Del keyboard input. The BIOS writes to a port (similar 
to port 64h in the keyboard controller) that asserts INIT. INIT is 
also used to support 80286 software that must return to Real 
mode after accessing extended memory in Protected mode. 

The assertion of INIT causes the processor to empty its 
pipelines, initialize most of its internal state, and branch to 
address FFFF_FFF0h — the same instruction execution starting 
point used after RESET. Unlike RESET, the processor 
preserves the contents of its caches, the floating-point state, the 
MMX state, Model-Specific Registers (MSRs), the CD and NW 
bits of the CRO register, the time stamp counter, and other 
specific internal resources. 

Figure 67 shows an example in which the operating system 
writes to an I/O port, causing the system logic to assert INIT. The 
sampling of INIT asserted starts an extended microcode 
sequence that terminates with a code fetch from FFFF_FFF0h, 
the reset location. INIT is sampled on every clock edge but is not 
recognized until the next instruction boundary. During an I/O 
write cycle, it must be sampled asserted a minimum of three 
clock edges before BRDY# is sampled asserted if it is to be 
recognized on the boundary between the I/O write instruction 
and the following instruction. If INIT is asserted synchronously, 
it can be asserted for a minimum of one clock. If it is asserted 
asynchronously, it must have been negated for a minimum of two 
clocks, followed by an assertion of a minimum of two clocks. 
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Figure 67. INIT-lnitiated Transition from Protected Mode to Real Mode 
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7 Power-on Configuration and Initialization 



On power-on the system logic must reset the AMD-K6 MMX 
enhanced processor by asserting the RESET signal. When the 
processor samples RESET asserted, it immediately flushes and 
initializes all internal resources and its internal state, including 
its pipelines and caches, the floating-point state, the MMX 
state, and all registers. Then the processor jumps to address 
FFFF_FFFOh to start instruction execution. 

7. 1 Signals Sampled During the Falling Transition of RESET 

FLUSH# FLUSH# is sampled on the falling transition of RESET to 
determine if the processor begins normal instruction execution 
or enters Tri-State Test mode. If FLUSH# is High during the 
falling transition of RESET, the processor unconditionally runs 
its Built-In Self Test (BIST), performs the normal reset 
functions, then jumps to address FFFF_FFFOh to start 
instruction execution. (See “Built-In Self-Test (BIST)” on page 
11-1 for more details.) If FLUSH# is Low during the falling 
transition of RESET, the processor enters Tri-State Test mode. 
(See “Tri-State Test Mode” on page 11-2 and “FLUSH# (Cache 
Flush)” on page 5-19 for more details.) 

BF[2:0] The internal operating frequency of the processor is 
determined by the state of the bus frequency signals BF[2:0] 
when they are sampled during the falling transition of RESET. 
The frequency of the CLK input signal is multiplied internally 
by a ratio defined by BF[2:0]. (See “BF[2:0] (Bus Frequency)” 
on page 5-8 for the processor-clock to bus-clock ratios.) 

BRDYC# BRDYC# is sampled on the falling transition of RESET to 
configure the drive strength of A[20:3], ADS#, HITM#, and 
W/R#. If BRDYC# is Low during the fall of RESET, these 
outputs are configured using higher drive strengths than the 
standard strength. If BRDYC# is High during the fall of RESET, 
the standard strength is selected. (See “BRDYC# (Burst Ready 
Copy)” on page 5-11 for more details.) 
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7.2 RESET Requirements 

During the initial power-on reset of the processor, RESET must 
remain asserted for a minimum of 1.0 ms after CLK and Vcc 
reach specification. (See “CLK Switching Characteristics” on 
page 16-1 for clock specifications. See “Electrical Data” on 
page 14-1 for V cc specifications.) 

During a warm reset while CLK and V cc are within 
specification, RESET must remain asserted for a minimum of 
15 clocks prior to its negation. 

7.3 State of Processor After RESET 

Output Signals Table 27 shows the state of all processor outputs and 

bidirectional signals immediately after RESET is sampled 
asserted. 



Table 27. Output Signal State After RESET 



Signal 


State 


Signal 


State 


A[31:3], AP 


Floating 


HLDA 


Low 


ADS#, ADSC# 


High 


LOCK# 


High 


APCHK# 


High 


M/10# 


Low 


BE[7:0]# 


Floating 


PCD 


Low 


BREQ 


Low 


PCHK# 


High 


CACHE# 


High 


PWT 


Low 


D/C# 


Low 


SCYC 


Low 


D[63:0], DP[7:0] 


Floating 


SMIACT# 


High 


FERR# 


High 


TDO 


Floating 


HIT# 


High 


VCC2DET 


Low 


HUM# 


High 


W/R# 


Low 



Registers Table 28 shows the state of all architecture registers and 

Model-Specific Registers (MSRs) after the processor has 
completed its initialization due to the recognition of the 
assertion of RESET. 
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Table 28. Register State After RESET 



Register 


State (hex) 


Notes 


GDTR 


base:0000_00Q0h limit:OFFFFh 




IDTR 


base:0000_0000h limit:OFFFFh 




TR 


OOOOh 




LDTR 


OOOOh 




EIP 


FFFFJTFOh 




EFLAGS 


0000_0002h 




EAX 


0000_0000h 


1 


EBX 


0000_0000h 




ECX 


0000_0000h 




EDX 


0000_056Xh 


2 


ESI 


0000_0000h 




EDI 


oooo_ooooh 




EBP 


0000_0000h 




ESP 


0000_0000h 




CS 


FOOOh 




SS 


OOOOh 




DS 


OOOOh 




ES 


OOOOh 




FS 


ooooh 




GS 


OOOOh 




FPU Stack R7-R0 


0000_0000_0000_0000_0000h 


3 


FPU Control Word 


0040h 


3 


FPU Status Word 


ooooh 


3 


FPU Tag Word 


5555h 


3 


FPU Instruction Pointer 


oooo_oooo_ooooh 


3 


FPU Data Pointer 


oooo_oooo_ooooh 


3 


FPU Opcode Register 


000_0000_0000b 


3 


CRO 


6000_0010h 


4 


CR2 


oooo_ooooh 




Notes: 

1. The contents of EAX indicate if BIST was successful. If EAX = 0000_0000h, BIST was successful. 
If EAX is non-zero, BIST failed. 

2. EDX contains the AMD-K6 processor signature, where X indicates the processor Stepping ID. 

3. The contents of these registers are preserved following the recognition of INIT. 

4. The CD and NW bits of CRO are preserved following the recognition of INIT. 
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Table 28 . Register State After RESET (continued) 



Register 


State (hex) 


Notes 


CR3 


0000_0000h 




CR4 


0000_0000h 




DR7 


0000_0400h 




DR6 


FFFF_0FF0h 




DR3 


0000_0000h 




DR2 


0000_0000h 




DR1 


0000_0000h 




DRO 


0000_0000h 




MCAR 


0000_0000_0000_0000h 


3 


MCTR 


0000_0000_0000_0000h 


3 


TR12 


0000_0000_0000_0000h 


3 


TSC 


0000_0000_0000_0000h 


3 


EFER 


0000_0000_0000_0000h 


3 


STAR 


0000_0000_0000_0000h 


3 


WHCR 


0000_0000_0000_0000h 


3 


Notes: 

1. The contents ofEAX indicate if BIST was successful. lfEAX= 0000_0000h, BIST was successful. 
If EAX is non-zero, BIST failed. 

2. EDX contains the AMD-K6 processor signature; where X indicates the processor Stepping ID. 

3. The contents of these registers are presen/ed following the recognition of INIT. 

4. The CD and NW bits of CRO are preserved following the recognition of INIT. 



7.4 State off Processor After INIT 

The recognition of the assertion of INIT causes the processor to 
empty its pipelines, to initialize most of its internal state, and to 
branch to address FFFF_FFFOh — the same instruction 
execution starting point used after RESET. Unlike RESET, the 
processor preserves the contents of its caches, the 
floating-point state, the MMX state, MSRs, and the CD and NW 
bits of the CRO register. 

The edge-sensitive interrupts FLUSH# and SMI# are sampled 
and preserved during the INIT process and are handled 
accordingly after the initialization is complete. However, the 
processor resets any pending NMI interrupt upon sampling 
INIT asserted. 

INIT can be used as an accelerator for 80286 code that requires 
a reset to exit from Protected mode back to Real mode. 
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8 Cache Organization 



The following sections describe the basic architecture and 
resources of the AMD-K6 MMX enhanced processor internal 
caches. 

The performance of the AMD-K6 processor is enhanced by a 
writeback level-one (LI) cache. The cache is organized as a 
separate 32-Kbyte instruction cache and a 32-Kbyte data cache, 
each with two-way set associativity (See Figure 68). The cache 
line size is 32 bytes, and lines are prefetched from main 
memory using an efficient, pipelined burst transaction. As the 
instruction cache is filled, each instruction byte is analyzed for 
instruction boundaries using predecode logic. Predecoding 
annotates each instruction byte with information that later 
enables the decoders to efficiently decode multiple 
instructions simultaneously. Translation lookaside buffers 
(TLB) are also used to translate linear addresses to physical 
addresses. The instruction cache is associated with a 64-entry 
TLB while the data cache is associated with a 128-entry TLB. 



32-Kbyte Instruction Cache 




32-Kbyte Data Cache 



Figure 68. Cache Organization 



Cache Organization 
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The processor cache design takes advantage of a sectored 
organization (See Figure 69). Each sector consists of 64 bytes 
configured as two 32-byte cache lines. The two cache lines of a 
sector share a common tag but have separate MESI (modified, 
exclusive, shared, invalid) bits that track the state of each 
cache line. 



Instruction Cache Line 



Tag 

Address 


Cache Line 1 


Byte 31 


Predecode Bits 


Byte 30 


Predecode Bits 


mm 




ByteO 


Predecode Bits 


1 MESI Bit 


Cache Line 2 


Byte 31 


Predecode Bits 


Byte 30 


Predecode Bits 






Byte 0 


Predecode Bits 


1 MESI Bit 



Data Cache Line 



Tag 

Address 


Cache Line 1 


Byte 31 


Byte 30 






ByteO 


2 MESI Bits 


Cache Line 2 


Byte 31 


Byte 30 






ByteO 


2 MESI Bits 



Note: Instruction-cache lines have only two coherency states (valid or invalid) rather than 
the four MESI coherency states of data-cache lines. Only two states are needed for the 
instruction cache because these lines are read-only. 

Figure 69. Cache Sector Organization 



8.1 MESI States in the Data Cache 

The state of each line in the caches is tracked by the MESI bits. 
The coherency of these states or MESI bits is maintained by 
internal processor snoops and external inquiries by the system 
logic. The following four states are defined for the data cache: 

■ Modified — This line has been modified and is different from 
main memory. 

■ Exclusive — This line is not modified and is the same as main 
memory. If this line is written to, it becomes Modified. 

■ Shared — If a cache line is in the shared state it means that 
the same line can exist in more than one cache system. 

■ Invalid — The information in this line is not valid. 

8.2 Predecode Bits 

Decoding x86 instructions is particularly difficult because the 
instructions vary in length, ranging from 1 to 15 bytes long. 
Predecode logic supplies the predecode bits associated with 
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each instruction byte. The predecode bits indicate the number 
of bytes to the start of the next x86 instruction. The predecode 
bits are passed with the instruction bytes to the decoders where 
they assist with parallel x86 instruction decoding. The 
predecode bits use memory separate from the 32-Kbyte 
instruction cache. The predecode bits are stored in an extended 
instruction cache alongside each x86 instruction byte as shown 
in Figure 69. 

8.3 Cache Operation 

The operating modes for the caches are configured by software 
using the not writethrough (NW) and cache disable (CD) bits of 
control register 0 (CRO bits 29 and 30 respectively). These bits 
are used in all operating modes. 

When the CD and NW bits are both set to 0, the cache is fully 
enabled. This is the standard operating mode for the cache. If a 
read miss occurs when the processor reads from the cache, a 
line fill takes place. Write hits to the cache are updated, while 
write misses and writes to shared lines cause external memory 
updates. 

Note: A write allocate operation can modify the behavior of write 
misses to the cache. See “Write Allocate” on page 8-7. 

When CD is set to 0 and NW is set to 1, an invalid mode of 
operation exists that causes a general protection fault to occur. 

When CD is set to 1 (disabled) and NW is set to 0, the cache fill 
mechanism is disabled but the contents of the cache are still 
valid. The processor reads from the cache and, if a read miss 
occurs, no line fills take place. Write hits to the cache are 
updated, while write misses and writes to shared lines cause 
external memory updates. 

When the CD and NW bits are both set to 1, the cache is fully 
disabled. Even though the cache is disabled, the contents are 
not necessarily invalid. The processor reads from the cache 
and, if a read miss occurs, no line fills take place. If a write hit 
occurs, the cache is updated but an external memory update 
does not occur. If a data line is in the exclusive state during a 
write hit, the MESI bits are changed to the modified state. 
Write misses access memory directly. 
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The operating system can control the cacheability of a page. 
The paging mechanism is controlled by CR3, the Page 
Directory Entry (PDE), and the Page Table Entry (PTE). Within 
CR3, PDE, and PTE are Page Cache Disable (PCD) and Page 
Writethrough (PWT) bits. The values of the PCD and PWT bits 
used in Table 29 through Table 31 are taken from either the 
PTE or PDE. For more information see the descriptions of PCD 
and PWT on pages 5-29 and 5-31, respectively. 

Table 29 through Table 31 describe the logic that determines 
the cacheability of a cycle and how that cacheability is affected 
by the PCD bits, the PWT bits, the PG bit of CRO, the CD bit of 
CRO, writeback cycles, the Cache Inhibit (Cl) bit of Test 
Register 12 (TR12), and unlocked memory reads. 

Table 29 describes how the PWT signal is driven based on the 
values of the PWT bits and the PG bit of CRO. 



Table 29. PWT Signal Generation 



PWT Bit* 


PG Bit of CRO 


PWT Signal 


1 


1 


High 


0 


1 


Low 


1 


0 


Low 


0 


0 


Low 


Note: 

* PWT is taken from PTE or PDE 



Table 30 describes how the PCD signal is driven based on the 
values of the CD bit of CRO, the PCD bits, and the PG bit of 
CRO. 

Table 30. PCD Signal Generation 



CD Bit of CRO 


PCD Bit* 


PG Bit of CRO 


PCD Signal 


1 


X 


X 


High 


0 


1 


1 


High 


0 


0 


1 


Low 


0 


1 


0 


Low 


0 


0 


0 


Low 


Note: 

* PCD is taken from PTE or PDE 



8-4 



Cache Organization 










































20695^/0-June 1997 



Preliminary Information AMDZH 

AMD-K6 ™ MMX™ Enhanced Processor Data Sheet 



Table 31 describes how the CACHE# signal is driven based on 
writeback cycles, the Cl bit of TR12, unlocked memory reads, 
and the PCD signal. 

Table 31. CACHE# Signal Generation 



Writeback 

Cycle 


Cl Bit of TR12 


Unlocked 
Memory Reads 


PCD Signal 


CACHE# 


1 


X 


X 


X 


Low 


0 


1 


1 


High 


High 


0 


0 


1 


High 


High 


0 


1 


0 


High 


High 


0 


0 


0 


High 


High 


0 


1 


1 


Low 


High 


0 


0 


1 


Low 


Low 


0 


1 


0 


Low 


High 


0 


0 


0 


Low 


High 



Cache-Related Signals Complete descriptions of the signals that control cacheability 
and cache coherency are given on the following pages: 

■ CACHE#— page 5-12 

■ EADS# — page 5-16 

■ FLUSH# — page 5-19 

■ HIT#— page 5-20 

■ HITM# — page 5-20 

■ INV— page 5-24 

■ KEN# — page 5-25 

■ PCD — page 5-29 

■ PWT — page 5-31 

■ WB/WT# — page 5-38 

8.4 Cache Disabling 

* 

To completely disable all cache accesses, the CD and NW bits 
must be set to 1 and the cache must be completely flushed. 

There are two different methods for flushing the cache. The 
first method relies on the system logic and the second relies on 
software. 
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For the system logic to flush the cache, the processor must 
sample FLUSH# asserted. In this method, the processor writes 
back any data cache lines that are in the modified state, 
invalidates all lines in the instruction and data caches, and then 
executes a flush acknowledge special cycle (See Table 21 on 
page 5-41). 

Software can use two different instructions to flush the cache. 
Both the WBINVD and INVD instructions cause all cache lines 
to be marked invalid. The WBINVD instruction causes all 
modified lines to first be written back to memory. The INVD 
instruction invalidates all cache lines without writing modified 
lines back to memory. 

Any area of system memory can be cached. However, the 
processor prevents caching of locked operations and TLB reads, 
the operating system can prevent caching of certain pages by 
setting the PCD and PWT bits in the PDE or PTE, and system 
logic can prevent caching of certain bus cycles by negating the 
KEN# input signal with the first BRDY# or NA# of a cycle. 

8.5 Cache-Line Fills 

When the CPU needs to read memory, the processor drives a 
read cycle onto the bus. If the cycle is cacheable the CPU 
asserts CACHE#. The system logic also has control of the 
cacheability of bus cycles. If it determines the address is 
cacheable, system logic asserts the KEN# signal and the 
appropriate value of WB/WT#. 

One of two events takes place next. If the cycle is not 
cacheable, a non-pipelined, single-transfer read takes place. 
The processor waits for the system logic to return the data and 
assert a single BRDY# (See Figure 46 on page 6-7). If the cycle 
is cacheable, the processor executes a 32-byte burst read cycle. 
The processor expects to sample BRDY# asserted a total of four 
times for a burst read cycle to take place (See Figure 48 on page 
6 - 11 ). 

Instruction-cache line fills initiate 32-byte transfers from 
memory (one burst cycle) on the bus. Data-cache line fills also 
initiate 32-byte transfers on the bus. If the data-cache line 
being filled replaces a modified line, the prior contents of the 
line are copied to a 32-byte writeback (copyback) buffer in the 
bus interface unit while the new line is being read. 
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8.6 Cache-Line Replacements 

As programs execute and task switches occur, some cache lines 
eventually require replacement. 

Instruction cache lines are replaced using a Least Recently 
Used (LRU) algorithm. If line replacement is required, lines 
are replaced when read cache misses occur. 

The data cache uses a slightly different approach to line 
replacement. If a miss occurs, and a replacement is required, 
lines are replaced by using a Least Recently Allocated (LRA) 
algorithm. 

Two forms of cache misses and associated cache fills can take 
place — a sector replacement and a cache line replacement. In 
the case of a sector replacement, the miss is due to a tag 
mismatch, in which case the required cache line is filled from 
external memory, and the cache line within the sector that was 
not required is marked as invalid. In the case of a cache line 
replacement, the address matches the tag, but the requested 
cache line is marked as invalid. The required cache line is filled 
from external memory, and the cache line within the sector that 
is not required remains in the same cache state. 

8.7 Write Allocate 

Write allocate, if enabled, occurs when the processor has a 
pending memory write cycle to a cacheable line and the line 
does not currently reside in the LI data cache. In this case, the 
processor performs a burst read cycle to fetch the data-cache 
line addressed by the pending write cycle. The data associated 
with the pending write cycle is merged with the 
recently-allocated data-cache line and stored in the processor’s 
LI data cache. The final MESI state of the cache line depends 
on the state of the WB/WT# and PWT signals during the burst 
read cycle and the subsequent cache write hit (See Table 32 on 
page 8-13 to determine the cache-line states and the access 
types following a cache read miss and cache write hit). 

During write allocates, a 32-byte burst read cycle is executed in 
place of a non-burst write cycle. While the burst read cycle 
generally takes longer to execute than the write cycle, 
performance gains are realized on subsequent write cycle hits 
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Write to a Cacheable 
Page 



Write to a Sector 



Write Cacheability 
Detection 



to the write-allocated cache line. Due to the nature of software, 
memory accesses tend to occur in proximity of each other 
(principle of locality). The likelihood of additional write hits to 
the write-allocated cache line is high. 

The following is a description of four mechanisms by which the 
AMD-K6 MMX enhanced processor performs write allocations. 
A write allocate is performed when any one or more of these 
mechanisms indicates that a pending write is to a cacheable 
area of memory. 

Every time the processor performs a cache line fill, the address 
of the page in which the cache line resides is saved in the 
Cacheability Control Register (CCR). The page address of 
subsequent write cycles is compared with the page address 
stored in the CCR. If the two addresses are equal, then the 
processor performs a write allocate because the page has 
already been determined to be cacheable. 

When the processor performs a cache line fill from a different 
page than the address saved in the CCR, the CCR is updated 
with the new page address. 

If the address of a pending write cycle matches the tag address 
of a valid cache sector, but the addressed cache line within the 
sector is marked invalid (a sector hit but a cache line miss), 
then the processor performs a write allocate. The pending write 
cycle is determined to be cacheable because the sector hit 
indicates the presence of at least one valid cache line in the 
sector. The two cache lines within a sector are guaranteed by 
design to be within the same page. 

Write Cacheability Detection causes a write allocate to occur 
only if the Write Cacheability Detection Enable (WCDE) bit 
(bit 8) in the Write Handling Control Register (WHCR) MSR is 
set to 1. If the processor samples the KEN# input signal 
asserted during an external write cycle, the processor saves the 
address of this page in the Write KEN# Control Register 
(WKCR). During this write cycle, the data is written to memory 
and not stored in the processor’s data cache. The page address 
of subsequent write cycles is compared with the page address 
stored in the WKCR. If the two addresses are equal, then the 
processor performs a write allocate because the page has 
already been determined to be cacheable. 
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When the processor performs a write cycle to a cacheable page 
different from the page address saved in the WKCR, the WKCR 
is updated with the new page address. 

The WKCR is marked invalid when one of the following events 
occurs: 

■ Any TLB entry is changed 

■ The WBINVD or INVD instruction is executed 

■ The assertion of the FLUSH# pin is recognized 

Support of the Write Cacheability Detection mechanism 
requires the system logic to assert KEN# during a write cycle if 
and only if the address is cacheable. If Write Cacheability 
Detection is enabled, KEN# is sampled during write cycles in 
the same manner it is sampled during read cycles (KEN# is 
sampled on the clock edge on which the first BRDY# or NA# of 
a cycle is sampled asserted). 

Write Allocate Limit The Write Handling Control Register (WHCR) is a MSR that 
contains three fields — the Write Allocate Enable Limit 
(WAELIM) field, the Write Allocate Enable 15*to-16-Mbyte 
(WAE15M) bit, and the Write Cacheability Detection Enable 
(WCDE) bit (See Figure 70). 

The WCDE bit is associated with the Write Cacheability 
Detection mechanism as described in the previous section. The 
other two fields described in this section define the Write 
Allocate Limit mechanism. 
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Symbol Description Bits 

WCDE Write Cacheability Detection Enable 8 
WAELIM Write Allocate Enable Limit 7-1 

WAE15M Write Allocate Enable 15-to-16-Mbyte 0 



Note: Hardware RESET initializes this MSR to all zeros. 



Figure 70. Write Handling Control Register (WHCR) 
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The WAELIM field is 7 bits wide. This field, multiplied by 4 
Mbytes, defines an upper memory limit. Any pending write 
cycle that addresses memory below this limit causes the 
processor to perform a write allocate. Write allocate is disabled 
for memory accesses at and above this limit unless the 
processor determines a pending write cycle is cacheable by 
means of one of the previous write allocate mechanisms — 
Write to a Cacheable Page, Write to a Sector, and Write 
Cacheability Detection. The maximum value of this memory 
limit is ((2 7 - 1) • 4 Mbytes) = 508 Mbytes. When all the bits in 
this field are set to 0, all memory is above this limit and this 
mechanism for allowing write allocate is effectively disabled. 

The Write Allocate Enable 15-to-16-Mbyte (WAE15M) bit is 
used to enable write allocations for the memory write cycles 
that address the 1 Mbyte of memory between 15 Mbytes and 16 
Mbytes. This bit must be set to 1 to allow write allocate in this 
memory area. This bit is provided to account for a small 
number of uncommon memory-mapped I/O adapters that use 
this particular memory address space. If the system contains 
one of these peripherals, the bit should be set to 0. The 
WAE15M bit is ignored if the value in the WAELIM field is set 
to less than 16 Mbytes. 

By definition a write allocate is never performed in the memory 
area between 640 Kbytes and 1 Mbyte. It is not considered safe 
to perform write allocations between 640 Kbytes and 1 Mbyte 
(000A_0000h to 000F_FFFFh) because it is considered a 
non-cacheable region of memory. 

Figure 71 shows the logic flow for all the mechanisms involved 
with write allocate for memory bus cycles. The left side of the 
diagram (the text) describes the conditions that need to be true 
in order for the value of that line to be a 1. Items 1 to 3 of the 
diagram are related to general cache operation and items 4 to 
11 are related to the write allocate mechanisms. 

For more information about write allocate, see the 
Implementation of Write Allocate in the K86™ Processors 
Application Note, order# 21326. 
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2) PCD Signal — 

3) Cl Bit of TR12- 



4) Write to Cacheable Page (CCR) - 

5) Write to a Sector 



6) Write KEN# Control Register (WKCR) Cacheable— | 

7) Write Cacheability Detection Enabled (WCDE) 



8) Less Than Limit (WAELIM) 
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10) Between 15-16 Mbytes 



1 1 ) Write Allocate Enable 15-16 Mbyte (WAEl5M)-d 



Figure 7 1 . Write Allocate Logic Mechanisms and Conditions 



Descriptions of the 
Logic Mechanisms 
and Conditions 



1. CD Bit of CRO — When the cache disable (CD) bit within 
control register 0 (CRO) is set to 1, the cache fill mechanism 
for both reads and writes is disabled, therefore write 
allocate does not occur. 

2. PCD Signal — When the PCD (page cache disable) signal is 
driven High, caching for that page is disabled even if KEN# 
is sampled asserted, therefore write allocate does not occur. 

3. Cl Bit of TR12 — When the cache inhibit bit of Test Register 
12 is set to 1, the LI caches are disabled, therefore write 
allocate does not occur. 

4. Write to a Cacheable Page (CCR) — A write allocate is 
performed if the processor knows that a page is cacheable. 
The CCR is used to store the page address of the last cache 
fill for a read miss. See “Write to a Cacheable Page” on page 
8-8 for a detailed description of this condition. 

5. Write to a Sector — A write allocate is performed if the 
address of a pending write cycle matches the tag address of 
a valid cache sector but the addressed cache line within the 
sector is invalid. See “Write to a Sector” on page 8-8 for a 
detailed description of this condition. 

6. Write KEN # Control Register (WKCR) Cacheable — If the 
processor samples the KEN# signal asserted during a write 
cycle, the processor saves that page address in the WKCR. 
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Subsequent writes to that page are known to be cacheable. 
See “Write Cacheability Detection” on page 8-8 for a 
detailed description of this condition. 

7. Write Cacheability Detection Enabled (WCDE) — To enable 
the WKCR described in number 6 above, bit 8 in WHCR 
must be set to 1. 

8. Less Than Limit (WAELIM) — The write allocate limit 
mechanism determines if the memory area being addressed 
is less than the limit set in the WAELIM field of WHCR. If 
the address is less than the limit, write allocate for that 
memory address is performed as long as conditions 9 and 10 
do not prevent write allocate. 

9. Between 640 Kbytes and 1 Mbyte — Write allocate is not 
performed in the memory area between 640 Kbytes and 1 
Mbyte. It is not considered safe to perform write allocations 
between 640 Kbytes and 1 Mbyte (000A_0000h to 
000F_FFFFh) because this area of memory is considered a 
non-cacheable region of memory. 

10. Between 15-16 Mbytes — If the address of a pending write 
cycle is in the 1 Mbyte of memory between 15 Mbytes and 16 
Mbytes, and the WAE15M bit is set to 1, write allocate for 
this cycle is enabled. 

11. Write Allocate Enable 15-16 Mbytes (WAE15M) — This 
condition is associated with the Write Allocate Limit 
mechanism and affects write allocate only if the limit 
specified by the WAELIM field is greater than or equal to 16 
Mbytes. If the memory address is between 15 Mbytes and 16 
Mbytes, and the WAE15M bit in the WHCR is set to 0, write 
allocate for this cycle is disabled. 

8.8 Prefetching 

The AMD-K6 MMX enhanced processor performs instruction 
cache prefetching for sector replacements only — as opposed to 
cache-line replacements. The cache prefetching results in the 
filling of the required cache line first, and a prefetch of the 
second cache line making up the other half of the sector. 
Furthermore, the prefetch of the second cache line is initiated 
only in the forward direction — that is, only if the requested 
cache line is the first position within the sector. From the 
perspective of the external bus, the two cache-line fills 
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typically appear as two 32-byte burst read cycles occurring 
back-to-back or, if allowed, as pipelined cycles. The burst read 
cycles do not occur back-to-back (wait states occur) if the 
processor is not ready to start a new cycle, if higher priority 
data read or write requests exist, or if NA# (next address) was 
sampled negated. Wait states can also exist between burst 
cycles if the processor samples AHOLD or BOFF# asserted. 

8.9 Cache States 

Table 32 shows all the possible cache-line states before and 
after program-generated accesses to individual cache lines. The 
table includes the correspondence between MESI states and 
writethrough or writeback states for lines in the data cache. 



Table 32. Data Cache States for Read and Write Accesses 



Type 


Cache State Before 
Access 


Access 

Type' 


Cache State After Access 


MESI State 


Writeback 
Writethrough State 


Cache 

Read 


Read Miss 


invalid 


single read 


invalid 


- 


invalid 


burst read 2 
(cacheable) 


shared or 
exclusive 3 


writethrough or 
writeback 3 


Read 

Hit 


shared 


- 


shared 


writethrough 


exclusive 


- 


exclusive 


writeback 


modified 


- 


modified 


writeback 


Cache 

Write 


Write Miss 


invalid 


single write 4 


invalid 


- 


Write Hit 


shared 


cache update and 
single write 


shared or 
exclusive 3 


writethrough or 
writeback 3 


exclusive or modified 


cache update 


modified 


writeback 



Notes: 

1. Single read, single write, cache update, and writethrough = / to 8 bytes. Line fill = 32-byte burst read. 

2. If CACHE # is driven Low and KEN # is sampled asserted. 

3. IfPWT is driven Low and WB/WT#is sampled High, the line is cached in the exclusive (writeback) state. 

4. A write cycle occurs only if the write allocate conditions as specified in 'Write Allocate" on page 8-7 are not met. 
- Not applicable or none. 
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8.10 Cache Coherency 

Different ways exists to maintain coherency between the 
system memory and cache memories. Inquire cycles, internal 
snoops, FLUSH#, WBINVD, INVD, and line replacements all 
prevent inconsistencies between memories. 

Inquire Cycles Inquire cycles are bus cycles initiated by system logic. These 

inquiries ensure coherency between the caches and main 
memory. In systems with multiple caching masters, system 
logic maintains cache coherency by driving inquire cycles to 
the processor. System logic initiates inquire cycles by asserting 
AHOLD, BOFF#, or HOLD to obtain control of the address bus 
and then driving EADS#, INV (optional), and an inquire 
address (A[31:5]). This type of bus cycle causes the processor to 
compare the tags for both its instruction and data caches with 
the inquire address. If there is a hit to a shared or exclusive line 
in the data cache or a valid line in the instruction cache, the 
processor asserts HIT#. If the compare hits a modified line in 
the data cache, the processor asserts HIT# and HITM#. If 
HITM# is asserted, the processor writes the modified line back 
to memory. If INV was sampled asserted with EADS#, a hit 
invalidates the line. If INV was sampled negated with EADS#, a 
hit leaves the line in the shared state or transitions it from the 
exclusive or modified to shared state. 

Internal Snooping Internal snooping is initiated by the processor (rather than 
system logic) during certain cache accesses. It is used to 
maintain coherency between the LI instruction and data 
caches. 

The processor automatically snoops its instruction cache during 
read or write misses to its data cache, and it snoops its data 
cache during read misses to its instruction cache. Table 33 
summarizes the actions taken during this internal snooping. 
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FLUSH# 



WBINVD and INVD 



Cache-Line 

Replacement 



If an internal snoop hits its target, the processor does the 
following: 

■ Data cache snoop during an instruction-cache read miss — If 
modified, the line in the data cache is written back to 
memory. Regardless of its state, the data-cache line is 
invalidated and the instruction cache performs a burst cycle 
read from memory. 

■ Instruction cache snoop during a data cache miss — The line in 
the instruction cache is marked invalid, and the data-cache 
read or write is performed from memory. 

In response to sampling FLUSH# asserted, the processor writes 
back any data cache lines that are in the modified state and 
then marks all lines in the instruction and data caches as 
invalid. 

These x86 instructions cause all cache lines to be marked as 
invalid. WBINVD writes back modified lines before marking all 
cache lines invalid. INVD does not write back modified lines. 

Replacing lines in the instruction or data cache, according to 
the line replacement algorithms described in “Cache-Line 
Fills” on page 8-6, ensures coherency between main memory 
and the caches. 

Table 33 shows all possible cache-line states before and after 
cache snoop or invalidation operations performed with inquire 
cycles. This table shows all of the conditions for writethroughs 
and writebacks to memory. 
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Table 33. Cache States for Inquiries, Snoops, Invalidation, and Replacement 



Type of Operation 


Cache State 
Before Operation 


Memory Access 


Cache State After Operation 


MESI State 


Writeback 
Writethrough State 


Inquire 

Cycle 


shared or 
exclusive 


- 


INV=0 


shared 


writethrough 


INV=1 


invalid 


invalid 


modified 


burst write 
(writeback) 


INV=0 


shared 


writethrough 


INV=1 


invalid 


invalid 




shared or 
exclusive 


- 


invalid 


invalid 


modified 


burst write 
(writeback) 


^9 


shared or 
exclusive 


- 


invalid 


invalid 


modified 


burst write 
(writeback) 


WBINVD 

Instruction 


shared or 
exclusive 


- 


invalid 


invalid 


modified 


burst write 
(writeback) 


INVD 

Instruction 


- 


- 


invalid 


invalid 


Cache-Line 

Replacement 


shared or 
exclusive 


- 


See Table 32 


modified 


burst write 
(writeback) 


Notes: 

All writebacks are 32-byte burst write cycles. 
- Not applicable or none. 




















































